Example 02 — Guarded tools Token limits, confirm_before, allow/deny tool lists, and approval flow. python examples/02-guarded-tools/main.py → onboarding.md step 2