Allow governed built-ins with retained dynamic tools

[first-assist]

Summary

• allow an initial provider-retained dynamic application-tool plan to coexist with independently governed provider built-ins
• preserve the existing restrictions on attachments, result input, reasoning summaries, output schemas, and continuations
• release graphql-orm-ai 0.95.0 with unchanged schema module 0.63.0

Security boundaries

Coexistence grants no provider capability. The existing provider-call and executor path still requires structural request validation, exact provider capability, current resolved-rule permission, separate egress authorization, bounded call and budget capacity, and authoritative lifecycle usage accounting.

Verification

• focused combined-plan regression: 2 passed
• complete default SQLite package suite: 251 unit tests plus integration suites and doctests
• Codex app-server feature suite: 326 unit tests plus integration suites and doctests
• warnings-denied all-target clippy with the app-server feature
• missing-docs rustdoc with the app-server feature
• PostgreSQL and MSSQL compile lanes
• formatting, documentation governance, workspace inventory, dependency boundaries, release state/manifest/policy, semver, and diff checks

Documentation impact

• Documentation updated
• No documentation impact

Explanation: release notes, migration guidance, provider-session security contract, implementation status, installation version, and generated workspace inventory are updated.