ToolFailure leaf boundary

Chose translating only expected typed leaf errors into ToolFailure over catchCause blankets because interruptions, defects, permission declines, and question dismissals must reach SessionModelRequest.executeTool. Leaves own ordering and must not catch those defects; only typed Permission.CorrectedError may become ToolFailure so the model can continue.