pub fn require_high_risk_approval( name: &str, auth: &ToolAuthContext, input: &Value, ) -> Option<ToolResult>