- Removes hardcoded `PLAN_MODE_TOOLS` from `ToolRegistry` and delegates permission checks to the `PolicyEngine` using the new `isToolPotentiallyAllowed` method.
- Preserves Plan Mode bypass logic for read-only MCP tools while ensuring they respect explicit/wildcard policy blocks.
- Makes `getActiveTools` public with TSDoc documentation for use in prompt generation.
- Adds regression tests to `tool-registry.test.ts` to verify policy-driven tool availability.