Build agent tool permission matrices from tool action, data class, user role, risk tier, approval rule, and expiry