feat: add tool allow/deny profiles with per-agent and per-provider filtering

Implements configurable tool filtering with four built-in profiles
(minimal, messaging, coding, full), global and per-agent/per-provider
allow/deny lists with glob pattern support, and defense-in-depth
enforcement at both tool listing and execution time.

New: src/tools/policy.ts (ToolPolicy engine), src/tools/policy.test.ts (37 tests)
Modified: config schema, tool registry, tool executor, NativeAgent,
AgentOrchestrator, daemon wiring, gateway tool handler, test mocks

src/gateway/handlers/handlers.test.ts

@@ -120,6 +120,7 @@ describe('tool handlers', () => {
 
   const mockRegistry = {
     list: vi.fn(() => [mockTool]),
+    filteredList: vi.fn(() => [mockTool]),
     get: vi.fn((name: string) => (name === 'test.tool' ? mockTool : undefined)),
     register: vi.fn(),
     toAnthropicFormat: vi.fn(),
@@ -138,6 +139,7 @@ describe('tool handlers', () => {
   beforeEach(() => {
     vi.clearAllMocks();
     mockRegistry.list.mockReturnValue([mockTool]);
+    mockRegistry.filteredList.mockReturnValue([mockTool]);
     mockRegistry.get.mockImplementation((name: string) => (name === 'test.tool' ? mockTool : undefined));
     mockExecutor.execute.mockResolvedValue({ success: true, output: 'done' });
   });