febffeebb1
The config.tools boolean false wasn't blocking plugin-registered tools. Add prepare_council_prompt, council_finalize, athena_council to global permission deny — same pattern as task: deny. Per-agent allow on athena/athena-junior overrides the global deny.