Fixes the six minor staticcheck findings (no behavior change):
- S1011 ×2: loop+append → append(dst, src...) in agenteval/score.go and
cli/agent_eval.go.
- S1016: convert rawResult to searchResult instead of a field-by-field struct
literal in tools/web_search.go (identical fields).
- ST1005: lowercase the "unsafe redirect URL" error string in tools/web_fetch.go
(+ update its test assertion).
- SA4006: drop the dead final assignment to next in a provider_wizard test
(keep the type assertion).
- S1009: remove the redundant nil check before len() in a provideronboarding
test.
staticcheck drops 32 → 26 (remaining: 15 U1000 unused + 11 SA1019 deprecated
mouse API — separate audit items). gofmt/vet/build/test (full) pass;
deadcode unchanged (100); govulncheck 0.