v0.46.0

Threads an agent card's tools.allow/disallow, mcpServers, and skills through QueuedWork → daemon hops → runner so they reach provider runtimes (previously only systemPrompt + model did). Card AllowedTools replace the runner default when present (disallow floor kept); card MCP servers merge with the platform gate (dedup by name); inline skills fold into SkillAppend; codex routes the allowlist into PermissionConfig; amp/agy-cli drops now WARN. Additive + omitempty. Ships lock-step with rensei-tui.