Remove all rule-based fallback systems, require LLM inference

Fix critical gaps: prompt-sensitive agent, adversarial customers, executable GRPO, OpenEnv wrapper