Add tool annotations (readOnlyHint, destructiveHint)

[toloco]

MCP clients use tool annotations to decide auto-approval vs user confirmation. All read tools should be marked readOnlyHint: true. mcp-go supports WithReadOnlyHintAnnotation(true).