fix(mcp): make tool approval annotations explicit (#297)

Set explicit MCP approval annotations for all tools

Author: cameroncooke

manifests/tools/boot_sim.yaml

@@ -6,7 +6,9 @@ names:
 description: Boot iOS simulator for manual/non-build flows. Not required before simulator build-and-run (build_run_sim).
 annotations:
   title: Boot Simulator
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Open the Simulator app (makes it visible)
     toolId: open_sim

manifests/tools/build_device.yaml

@@ -8,4 +8,6 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build Device
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/build_macos.yaml

@@ -8,4 +8,6 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build macOS
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/build_run_device.yaml

@@ -8,7 +8,9 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build Run Device
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Capture device logs
     toolId: start_device_log_cap

manifests/tools/build_run_macos.yaml

@@ -8,4 +8,6 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build Run macOS
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/build_run_sim.yaml

@@ -8,7 +8,9 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build Run Simulator
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Capture structured logs (app continues running)
     toolId: start_sim_log_cap

manifests/tools/build_sim.yaml

@@ -8,4 +8,6 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Build Simulator
+  readOnlyHint: false
   destructiveHint: false
+  openWorldHint: false

manifests/tools/button.yaml

@@ -6,4 +6,6 @@ names:
 description: Press simulator hardware button.
 annotations:
   title: Hardware Button
+  readOnlyHint: true
   destructiveHint: false
+  openWorldHint: false

manifests/tools/clean.yaml

@@ -8,4 +8,6 @@ predicates:
   - hideWhenXcodeAgentMode
 annotations:
   title: Clean
+  readOnlyHint: false
   destructiveHint: true
+  openWorldHint: false

manifests/tools/debug_attach_sim.yaml

@@ -6,6 +6,11 @@ names:
 description: Attach LLDB to sim app.
 routing:
   stateful: true
+annotations:
+  title: Debug Attach Sim
+  readOnlyHint: false
+  destructiveHint: false
+  openWorldHint: false
 nextSteps:
   - label: Add a breakpoint
     toolId: debug_breakpoint_add