Function parse_allowlist 

pub fn parse_allowlist(raw: &JsonValue) -> Option<BTreeSet<String>>

Parses the allowlist of a capability decision: an array of tool names or an object with a tools array. Returns None for anything else.