fix: improve cache key design for ssrfPolicy

- Use JSON.stringify to encode full policy object instead of hardcoded suffix
- This ensures future ssrfPolicy fields are automatically included in cache key
- Prevents potential cross-policy cache bypass when new fields are added

src/agents/tools/web-fetch.ts

@@ -516,7 +516,8 @@ async function maybeFetchFirecrawlWebFetchPayload(
 
 async function runWebFetch(params: WebFetchRuntimeParams): Promise<Record<string, unknown>> {
   // Include ssrfPolicy in cache key to prevent cross-policy cache bypass
-  const ssrfPolicySuffix = params.ssrfPolicy?.allowRfc2544BenchmarkRange ? ":rfc2544" : "";
+  // Use JSON.stringify to encode the full policy object, ensuring future fields are automatically included
+  const ssrfPolicySuffix = params.ssrfPolicy ? `:${JSON.stringify(params.ssrfPolicy)}` : "";
   const cacheKey = normalizeCacheKey(
     `fetch:${params.url}:${params.extractMode}:${params.maxChars}${ssrfPolicySuffix}`,
   );