Function apply_tool_policy 

pub fn apply_tool_policy(
    allowed: Option<Vec<String>>,
    excluded: Option<Vec<String>>,
) -> Vec<BeforeInferenceAction>

Apply tool policy: keep only allowed tools, remove excluded ones.