feat(ai): catalogue d'outils mutations + confirmations two-step (#79 phase D)

backend/tools/registry.py

@@ -194,6 +194,13 @@ def call_tool(
             _audit(ctx, spec, arguments, ok=False, error=e.code)
             raise
 
+    if spec.risk == ToolRisk.DANGEROUS and vault and vault != "all":
+        try:
+            ctx.require_destructive_allowed(vault)
+        except ToolPermissionError as e:
+            _audit(ctx, spec, arguments, ok=False, error=e.code)
+            raise
+
     if spec.requires_confirmation and not (confirm or ctx.confirmed):
         raise ToolConfirmationRequired(spec.name, arguments)