Follow-up from #2488/#2489 PR.\n\ndocs/src/ should document the new [tools.file] deny_read / allow_read configuration including usage examples and security guidance.\n\nSee reviewer finding from feat/issue-2488 implementation.