Tools the user always-allowed (via /allow or an "approve always" prompt answer), persisted across runs.
/allow
final List<String> allowedTools;