Model data policy

Coming in a later phase. By default no Kit data reaches Ketvia’s language model. The model data policy will let a workspace admin allow, per Kit and per tool, validated tool output to be used for generated answers, behind data-class safeguards. Until then requestedModelDataPolicy must be none. Conversation content a Kit reads with messages:read is never fed to the model on the Kit’s behalf.