Policy-filtered capability descriptors.
Fully populated tool manifest ready for MCP runtime registration.
The caller is responsible for applying policy before calling this
function. Use applyCapabilityPolicy from CapabilityPolicy to
filter the inventory first.
Generic capabilities (kind === 'generic') are collapsed by
operationType, each producing one McpGenericTool with an
enumerated supportedObjectTypes list. Special capabilities
(kind === 'special') produce one McpSpecialTool each. A single
McpDiscoveryEntry is always appended and counted in totalToolCount.
Builds a reduced MCP tool manifest from a policy-filtered capability inventory.