Security-sensitive local tool implementations shared by the runtime:
- --
This crate owns tool policies and the typed `ToolSecurityPolicy` used by higher layers.
Integrations that require external processes/protocols (for example MCP bridge or plugin process adapters) remain outside this crate.