fix(wechat): route scheduled task cancel and spec updates through Goose MCP

Pass cancel requests to Goose like create instead of inbound title matching,
and add scheduled_task_update_spec so format or execution constraints update
taskSpec without triggering page delivery guards.

Co-authored-by: Cursor <cursoragent@cursor.com>

capabilities.test.mjs

@@ -398,6 +398,7 @@ test('sandboxMcpTools returns correct tool list based on capabilities', () => {
     'scheduled_task_create',
     'scheduled_task_list',
     'scheduled_task_cancel',
+    'scheduled_task_update_spec',
   ]);
 
   const withBrowse = { ...base, code_browse: true };
@@ -424,6 +425,7 @@ test('private_data_space alone exposes private data tools through sandbox MCP',
     'scheduled_task_create',
     'scheduled_task_list',
     'scheduled_task_cancel',
+    'scheduled_task_update_spec',
   ]);
 
   const policy = buildAgentExtensionPolicy(caps, {
@@ -458,6 +460,7 @@ test('private_data_space alone exposes private data tools through sandbox MCP',
     'scheduled_task_create',
     'scheduled_task_list',
     'scheduled_task_cancel',
+    'scheduled_task_update_spec',
   ]);
 });