fix: resolve mypy type errors in prompt injection defense

- Fix ToolCallRequest import path (langgraph.prebuilt.tool_node)
- Use Runnable type for model with tools bound (bind_tools returns Runnable)
- Handle args_schema that may be dict or BaseModel