Fix FBT002: make boolean params keyword-only across codebase

[Copilot]

Resolve all 22 FBT002 (boolean default positional argument) lint violations and remove the rule from the Ruff suppression list.

Changes

• Function signatures: Add * separator before boolean parameters with defaults, making them keyword-only
• Call site fix: Update one caller in runner.py that passed headless positionally to build_mcp_servers()
• pyproject.toml: Remove FBT002 from [tool.ruff.lint] ignore

Affected modules: agent.py, cli.py, mcp_lifecycle.py, runner.py, render_utils.py, template_utils.py, codeql/client.py, codeql/jsonrpyc/__init__.py, scripts/migrate_to_jinja2.py

# Before
def build_mcp_servers(available_tools, toolboxes, blocked_tools=None, headless=False): ...

# After
def build_mcp_servers(available_tools, toolboxes, blocked_tools=None, *, headless=False): ...

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• unsupported.example.com
  • Triggering command: /usr/bin/python python -m pytest tests/ -x -q (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)