Auth: web session (backend)
Tool catalog and recent runs will appear here. Consequential execution remains on the backend ToolRuntime boundary.
Next: Sprint F7 tools and system activity.