Run the vlt agent get test in agent mode

get defaults to hosted mode since 5e5f5ed, so the real-vlt
get_and_remove leg ran a hosted get and found the installed copy
unpatched (Absent, expected Patched). Pass --mode agent, as the other
agent-mode fixtures already do. Same change as cc5f1b6 on #285; it
blocked the e2e tier's e2e_vlt jobs now that they run.

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01AfGnDQMy2FvpExneXmR1qp

Author: claude

crates/socket-patch-cli/tests/e2e_vlt.rs

@@ -151,7 +151,7 @@ async fn vlt_pinned_matrix_agent_get_and_remove() {
         return;
     };
     let fx = Fixture::build(leg, Shape::with_bystander().warm()).await;
-    let out = socket_api(&fx.proj, &fx.svc, &["get", UUID], &[]);
+    let out = socket_api(&fx.proj, &fx.svc, &["get", UUID, "--mode", "agent"], &[]);
     assert_eq!(out.code, 0, "{out}");
     assert_eq!(state(&fx.proj, fx.t()), State::Patched);
     let purl = fx.t().purl();