pty_read grep isolation

Trap: moving model-controlled regexes to bounded grep -E looks sufficient, but concurrent reads can still create unlimited workers and aggregate memory/process pressure. Fix: enforce a bounded worker semaphore, cap stdin and output, handle child/stdin errors, apply a hard deadline, force text-safe NUL behavior, and bound limit before materializing lines.