DB-native rules evaluated at PreToolUse / PostToolUse — deny, warn, or require approval for specific tools, commands, or patterns.