Per-tool permissions for developer agents, origin-aware inputs, default-deny controls | SaaSBrowser.ai