fix(workboard): grant dispatch workers required tools

src/plugins/runtime/tool-grant.ts

@@ -0,0 +1,5 @@
+/** Owner-scoped additive plugin tools for one trusted agent run. */
+export type RuntimePluginToolGrant = {
+  pluginId: string;
+  toolNames: readonly string[];
+};

src/plugins/runtime/types.ts

@@ -15,6 +15,8 @@ type PluginRuntimeChannel = import("./types-channel.js").PluginRuntimeChannel;
 export type SubagentRunParams = {
   sessionKey: string;
   message: string;
+  /** Add exact tools registered by the calling plugin to the worker's normal tool surface. */
+  toolsAlsoAllow?: string[];
   provider?: string;
   model?: string;
   extraSystemPrompt?: string;