feat(core): disable tool discovery by default and require explicit configuration

packages/cli/src/config/settingsSchema.ts

@@ -1190,6 +1190,17 @@ const SETTINGS_SCHEMA = {
         description: 'Command to run for tool discovery.',
         showInDialog: false,
       },
+      enableToolDiscovery: {
+        type: 'boolean',
+        label: 'Enable Tool Discovery',
+        category: 'Tools',
+        requiresRestart: true,
+        default: false,
+        description: oneLine`
+          Enables the tool discovery feature using \`tools.discoveryCommand\`.
+        `,
+        showInDialog: true,
+      },
       callCommand: {
         type: 'string',
         label: 'Tool Call Command',