Function default_tool_policy 

pub fn default_tool_policy(tool_name: &str, is_builtin: bool) -> ToolPolicy

Default policy for a tool: read-only builtins are allowed, mutating ones ask, human-in-the-loop tools are always allowed, and anything else requires approval.