Agent tools

Tools CoS can request — read live from the same registry the model is given, so this list never drifts from the code. Read tools run under your access (RLS).