feat(ai-tools): Settings → AI Tools, Default/Other lane picker, per-run bypass switch (#40 A1)

Settings → Dashboard gains an AI Tools section (installed tools with
Enabled/Disabled and Set default, available ones with a homepage link,
Refresh). useAiTools shares one catalog copy across the app and replaces
LANE_TOOL_LABEL. The Add-lane modal picks Default (<tool>) or Other…; the
router row reads Native (<tool>) and disables AI Router profiles for tools
that cannot use one. The run form gives catalog tools resume and a red
per-run Bypass permissions switch (Codex too). Claude Code / Codex settings
tabs hide while that tool is disabled. The Workspace probes each lane tool's
CLI fresh.

Docs: CLAUDE.md tool/bypass rule, AGENTS.md, LANES.md, API.md, CLI.md,
server/README.md, OpenAPI fragment + regenerated openapi.yaml.

server/openapi-extra.js

@@ -15,6 +15,7 @@ const codexConfig = require("./openapi-extra/codex-config");
 const run = require("./openapi-extra/run");
 const lanes = require("./openapi-extra/lanes");
 const push = require("./openapi-extra/push");
+const aiTools = require("./openapi-extra/ai-tools");
 const misc = require("./openapi-extra/misc");
 // Enriched overrides of already-documented endpoints — same operationId, tags,
 // and request/response `$ref` schemas as the base, with added examples and
@@ -49,6 +50,7 @@ module.exports = combine(
   run,
   lanes,
   push,
+  aiTools,
   misc,
   overrideSessionsAgents,
   overrideCore,