pub fn matches_tool_pattern(pattern: &str, tool_name: &str) -> bool
Checks if a tool name matches an allowed tool pattern.
Supports patterns like:
"Read"
"Bash(git:*)"