Tool permission metadata filtering

Chose leaf-owned Permission.Service.assert calls over Tool-registry execution authorization because leaves know the canonical invocation source, resources, and side-effect ordering. Registry options.permission only removes wholly denied definitions from snapshots; treating visibility as authorization would bypass asks, saved grants, hooks, and resource-sensitive policy.