List a connected account's tools and their approval behavior

The read-only list of provider actions Patricia can take through one connected account, each with its risk tier and what a new directed call would do FOR THE CALLING MEMBER (auto runs without asking, ask asks first). gate is per-viewer — it reflects that member's own approval policy and per-tool overrides, so two members can see different values on the same row of a shared connection — while locked stays account-level and marks a mandatory call, or a live tier this build cannot parse, which nothing on this tab can relax. A readable CRITICAL action is NOT locked: it asks by default, and one such action on one connection can carry a member's own always-allow consent. It is the STANDING behavior, before any per-run or per-argument downgrade: a static read has no run, conversation or arguments. Only enabled tools are listed. Tenant- and owner-scoped: a foreign/unknown or not-visible account id 404s, so it is never an existence oracle for another member's private account.