IntentKit validated tool calls against the wrong list

CVE-2026-76066: IntentKit's executor validated tool calls against the full registry instead of the per-request binding, letting public callers invoke owner-only tools by name.