Clean up dead code, unused imports, and move hardcoded values to config.yaml

Fix critical gaps: prompt-sensitive agent, adversarial customers, executable GRPO, OpenEnv wrapper