Promise permission failure tunnel

Trap: treating every rejected Promise permission assertion alike looks correct because all cross the same Promise boundary, but it either turns CorrectedError into a defect or exposes declines as recoverable failures. Fix: wrap only typed Effect failures in TypedFailure; executePromiseTool converts CorrectedError.feedback to the exact Tool.Error.message, while ordinary defects and Core’s deliberately defect-tunneled DeclinedError remain defects.