Add ToolsetRegistry struct that holds toolset definitions and tools,
with a NewToolsetGroup method that accepts ToolsetGroupConfig:
- ReadOnly: restricts to read-only tools
- ActiveToolsets: which toolsets to enable
- AvailableScopes: filter tools by OAuth scope requirements
- nil: no scope checking (all tools available)
- []: empty means no scopes (only tools with no requirements)
- [...]: tools must have required scopes in the list
This enables dynamic tool filtering based on the user's actual
OAuth token scopes, ensuring only authorized tools are exposed.
Sam Morrow
2f0ef4a2ad