Function required_capabilities 

pub fn required_capabilities(effects: &EffectRow) -> CapabilitySet

Map a tool’s wm-core invokes list onto the governance capability vocabulary.

Mapping decisions:

• Search / VectorSearch are memory reads.
• Embed / LlmInfer are model invocations.
• Execute is process spawning; NetworkRequest is outbound network.
• Dream consolidates memories (write); CittaUpdate is internal state and maps to no external capability.
• Delegate (tool-to-tool delegation) is conservatively mapped to AdminGovernance — delegation is a governed act; no current tool declares it.