Tools and approvals

Coming in a later phase. A Kit will be able to expose tools (an MCP server) that Ketvia’s assistants can use once an admin grants them. Read tools run directly; write tools always go through Ketvia’s approval cards, which show the exact change before anything is applied. The manifest’s tools section and the safe JSON Schema subset are already specified, but private Kits cannot declare tools yet.