feat: choose per tool whether MCP, voice or both offer it

src/tools/surfaces.js lists the tools a surface leaves out, and the MCP
server, the voice session's tool list and the browser catalog voice calls
all filter through it. Voice leaves out tools that answer with images, link
to the app, or repeat what its app actions already answer.

scripts/package-boundaries.json

@@ -3122,7 +3122,8 @@
       "src/tools/queries/infrastructure.js",
       "src/tools/queries/events.js",
       "src/data/bhoteKoshiFloodPath.js",
-      "src/tools/functions.js"
+      "src/tools/functions.js",
+      "src/tools/surfaces.js"
     ],
     "external": ["satellite.js"]
   },