fix(task): share one child tool list between grant and session options

The nested-host-scope grant and buildChildSessionOptions both consume
childStructuralToolNames from a single host-tool table (senpi session
builtins plus merged custom tools). Write-capability is derived from that
same table. Workpool resolve now passes existingToolNames. Drift and
synthetic-escalation tests lock the shared list.