Enforce exec director tool allowlists through tool_search and promote

Enforce exec director tool allowlists through tool_search and promote #3249