agentcap: paired HTTP captures + native session traces. Join on run_id.