fix: wrap more tool responses in untrusted-user-data tags

fix: wrap more tool responses in untrusted-user-data tags #1118