feat(abilities): add datamachine/web-fetch for public pages (#3922)

* feat(abilities): add datamachine/web-fetch for public pages

Closes #3917

* fix(abilities): guard wp_parse_url false in web-fetch redirect resolution

---------

Co-authored-by: homeboy-ci[bot] <266378653+homeboy-ci[bot]@users.noreply.github.com>

Author: chubes4

plugins/data-machine/inc/Abilities/PermissionHelper.php

@@ -43,6 +43,7 @@ class PermissionHelper {
 		'use_tools'        => 'datamachine_use_tools',
 		'view_logs'        => 'datamachine_view_logs',
 		'create_own_agent' => 'datamachine_create_own_agent',
+		'web_fetch'        => 'publish_posts',
 	);
 
 	/**
@@ -179,11 +180,13 @@ public static function can_manage(): bool {
 	 * - daily_memory: reading and appending the acting agent's daily memory.
 	 *   Scope comes from the execution principal; overwrite and delete stay
 	 *   behind can_manage() inside DailyMemoryAbilities.
+	 * - web_fetch: reading a public web page as text maps to publish_posts,
+	 *   the same author level the web_fetch chat tool already requires.
 	 *
 	 * @since 0.37.0
 	 * @var string[]
 	 */
-	private const IMPLIED_BY_MANAGEMENT = array( 'view_analytics', 'render_images', 'upload_media', 'daily_memory', 'search_content' );
+	private const IMPLIED_BY_MANAGEMENT = array( 'view_analytics', 'render_images', 'upload_media', 'daily_memory', 'search_content', 'web_fetch' );
 
 	/**
 	 * Check whether current context can perform an action.