feat(studio): update sandbox images from regional catalogs

[zakahan]

System Information previously offered a Codex model-environment repair action, but could not detect new sandbox image releases. This change compares each configured Tool with the ListToolTypes catalog for its provider and actual region, and updates outdated prebuilt Tools using UpdateTool.ImageUrl.

Codex and DeepSeek Harness share progress and results when they reference the same Tool. Updates recheck current state, preserve the existing model-environment repair behavior, and wait for the Tool to become Ready with the target image. The UI shows current/target versions, supports retry, and includes Chinese and English translations. Matching WebUI build artifacts and documentation are included.

Validation:

• 1,031 frontend tests; localization consistency check; production build and packaged asset reference verification.
• 163 targeted Python tests, run without local deployment configuration.
• Pre-commit checks, including Ruff and secret scanning.
• New Python modules pass Pyright. The existing cli_frontend.py still has the same 40 pre-existing type errors.
• Volcengine CodeEnv image updating was verified live. BytePlus uses the provider-scoped client and has automated coverage; no live BytePlus update was performed.