Function is_readonly_tool 

pub fn is_readonly_tool(tool_id: &str) -> bool

Returns true if tool_id is a native read-only tool.

Reuses the same READONLY_TOOLS allowlist that gates ReadOnly autonomy mode, so Supervised mode’s unconfigured-tool bypass (TrustGateExecutor::check_trust) cannot silently diverge from it — see #5575.