Update Tool Config

Update tool configuration for the user.

Only factories that are not dashboard_always_enabled can be toggled at the factory level. Attempts to disable always-enabled tools are silently ignored.

Each entry may include a sub_tools list with explicit permission_level values to override individual sub-tools. Levels are persisted to user_permissions; "never" filters the sub-tool out of the LLM schema on the next turn.