Dev-Saif-Ops/toolwall

Fail-closed firewall for AI agent tool calls. Blocks the sc…