pub fn set_vault(vault: SharedVault)
Called once from the gateway to register the vault for tool access.