fix(serve): wire per-session capability scopes, skill/memory tools, and policy fail-closed#6140

bug-ops merged 2 commits into

mainbug-ops/zeph:mainfrom

fix/6045-serve-scope-denials-sentinelbug-ops/zeph:fix/6045-serve-scope-denials-sentinelCopy head branch name to clipboard