Instant tool-permission gates

Agents propose tool calls; Jev decides allow or deny in a snap. Tiny demo of policy decisions that do not need an essay.