refactor(tools): add catalog runtime facades

docs/architecture/core-decomposition.md

@@ -66,7 +66,7 @@ Rust 编译和链接面。
 | `bitfun-agent-stream` | Stream 聚合和 stream-focused 测试 | done：stream 聚合已独立 |
 | `bitfun-runtime-ports` | 面向 service/agent 边界的轻量跨层 DTO 和 trait | partial：DTO/trait-only 边界已建立，包含 agent submission/transcript/cancel、remote state、runtime event 与 remote image attachment 契约；不拥有 runtime 实现 |
 | `bitfun-agent-runtime` | Sessions、execution、coordination、agent system | target：crate 尚不存在，agent runtime 仍在 core |
-| `bitfun-agent-tools` | 轻量 tool DTO / contract、portable tool context facts / provider、runtime restriction、pure manifest/exposure and GetToolSpec presentation/schema/static metadata/detail/result assembly / execution-plan contract、provider-backed GetToolSpec execution result helper、generic contextual manifest resolver、generic catalog snapshot provider / GetToolSpec catalog provider、generic registry / static-provider / dynamic-provider / decorator-ref / snapshot-decorator adapter / runtime assembly container、generic readonly/enabled snapshot filter | partial：product registry snapshot access、`ToolUseContext` adapter、`GetToolSpec` Tool impl 和 concrete tools 仍在 core；core 当前把内置工具列表保留为 core-owned static provider group，但 static-provider 安装 assembly、decorator reference、generic snapshot decorator adapter 与 readonly/enabled 过滤规则已委托给 `bitfun-agent-tools` |
+| `bitfun-agent-tools` | 轻量 tool DTO / contract、portable tool context facts / provider、runtime restriction、pure manifest/exposure and GetToolSpec presentation/schema/static metadata/detail/result assembly / execution-plan contract、provider-backed tool catalog / GetToolSpec runtime facade、provider-backed GetToolSpec execution result helper、generic contextual manifest resolver、generic catalog snapshot provider / GetToolSpec catalog provider、generic registry / static-provider / dynamic-provider / decorator-ref / snapshot-decorator adapter / runtime assembly container、generic readonly/enabled snapshot filter | partial：product registry snapshot access、`ToolUseContext` adapter、`GetToolSpec` Tool impl 和 concrete tools 仍在 core；core 当前把内置工具列表保留为 core-owned static provider group，但 static-provider 安装 assembly、decorator reference、generic snapshot decorator adapter、provider-backed catalog runtime facade 与 readonly/enabled 过滤规则已委托给 `bitfun-agent-tools` |
 | `bitfun-tool-packs` | 由 feature group 隔离的具体工具实现 | target/scaffold：仅提供 basic / git / mcp / browser-web / computer-use / image-analysis / miniapp / agent-control feature-group 元数据，不得声明 concrete tools 已迁移 |
 | `bitfun-services-core` | Config、session、workspace、storage、filesystem、system services | partial：部分 pure helper 已迁出；config/workspace/filesystem runtime 多数仍在 core |
 | `bitfun-services-integrations` | Git、MCP、remote SSH、remote connect、file watch integrations | partial：MCP runtime 已迁入；remote SSH 仍只迁移低风险 contracts/helpers；remote-connect 已拥有 wire DTO、request builder、tracker state / registry lifecycle 与 tracker event reduction，dispatcher/product execution 仍在 core |
@@ -137,7 +137,7 @@ owner 边界，否则不要把一个 feature group 继续拆成更小的 crate
   在此之前该 hook 仍属于 `bitfun-core` agent runtime assembly。
 - 最新主干新增 on-demand tool spec discovery。`ToolExposure`、`GetToolSpec` 名称、
   collapsed stub、manifest ordering、generic collapsed exposure query、generic contextual
-  prompt-manifest resolver、generic catalog snapshot provider、GetToolSpec catalog provider /
+  prompt-manifest resolver、generic catalog snapshot provider、ToolCatalogRuntime / GetToolSpec catalog provider /
   prompt / schema / assistant-detail rendering / detail JSON 等 provider-neutral 契约可由 `bitfun-agent-tools`
   拥有；但产品 registry snapshot、`dyn Tool`
   / `ToolUseContext` adapter、product collapsed-tool catalog、context-aware tool
@@ -230,20 +230,25 @@ owner 边界，否则不要把一个 feature group 继续拆成更小的 crate
   迁移；后续高风险队列只允许按 H1-H5 的单一 owner 主题推进：
   - H1：tool runtime owner 迁移。当前只完成迁移前/迁移中边界收敛：`bitfun-agent-tools`
     承载 provider-neutral tool contract、generic registry/static/dynamic provider、
-    contextual manifest resolver、GetToolSpec presentation/schema/static metadata/detail/
-    result assembly / execution-plan helper、provider-backed execution result helper，
+    contextual manifest resolver、provider-backed tool catalog runtime facade、
+    GetToolSpec presentation/schema/static tool surface/detail/
+    result assembly / execution-plan helper、provider-backed runtime facade / execution result helper，
     generic decorator reference / snapshot-decorator adapter / static-provider runtime assembly
     container，以及 generic readonly/enabled registry snapshot filter；
     core 仍持有 `ToolUseContext`、runtime manifest assembly、`GetToolSpecTool`
     Tool impl、collapsed unlock state source、product snapshot wrapper adapter 与 concrete tools。
     已合入 PR #803 把 core `Tool` 到 provider-neutral contract 的 adapter 收敛到
     `tool_adapter.rs`，把 product catalog / manifest / GetToolSpec catalog-detail provider
-    收敛到 `catalog_provider.rs`；本阶段把 provider-neutral GetToolSpec static metadata /
-    tool-use message / execution plan / result assembly 与 provider-backed execution result helper 收敛到
-    `bitfun-agent-tools`；本阶段继续把 static-provider 安装 assembly 委托到
+    收敛到 `catalog_provider.rs`；本阶段把 provider-neutral GetToolSpec static tool surface
+    （name / description / schema / readonly / concurrency / permission / validation / tool-use message）、
+    execution plan / result assembly 与 provider-backed execution result helper 收敛到
+    `bitfun-agent-tools`；本阶段继续把 provider-backed visible-tools / manifest / readonly
+    catalog 查询收敛到 `ToolCatalogRuntime`，core 只保留 product registry snapshot、agent
+    policy、`dyn Tool` / `ToolUseContext` adapter；本阶段继续把 static-provider 安装 assembly 委托到
     `ToolRuntimeAssembly`，core 只保留 concrete provider groups、product snapshot wrapper
-    adapter、product provider/context 注入和错误映射；本阶段也把 decorator reference
-    contract、generic snapshot decorator adapter 与 readonly enabled filtering 的通用规则委托给
+    adapter、product provider/context 注入、`GetToolSpecTool` Tool impl、unlock state source
+    和错误映射；本阶段也把 decorator reference contract、generic snapshot decorator adapter、
+    GetToolSpec runtime facade 与 readonly enabled filtering 的通用规则委托给
     `bitfun-agent-tools`，不改变工具行为。
   - H2：product-domain runtime owner 迁移。MiniApp / function-agent 的纯 DTO/helper/port
     facade 已外移，filesystem IO、worker process、host dispatch、built-in asset seeding /