Throw when Anthropic web search allowed and blocked domains are both set (#314275)

Anthropic's web_search tool rejects requests that set both allowed_domains
and blocked_domains. Previously the BYOK provider silently used allowed
domains when both VS Code settings were populated, hiding the
misconfiguration. Now we surface a clear, localized error in chat instead.

Fixes #275418