Least-Privilege Scoping For Agent Tools