Agent permission attenuation

Deep Agents hands each subagent a fresh tool grant instead of narrowing the parent's

The framework never intersects a child's tool list with its caller's, so a supervisor holding one tool can spawn a writer that searches the web. The intersection is a middleware you have to write yourself.