Function agentGateConnectors

The breakwater connector ids an approved agent gate should grant: the single provider-safe tool id the model called (== the connector id the write gate checks; see the file header's provider-rewrite constraint). Requires BOTH a non-empty toolName AND a non-empty toolCallId — a real durable-agent gate always carries both (toolCallId is the suspend's resumeLabel), so demanding both never rejects a real gate while narrowing the surface where a workflow-step gate COINCIDENTALLY shaped {type:'approval', toolName} would mint an unintended grant (a workflow author's own convention is an explicit connectors array, which requestedConnectors takes first). Returns [] otherwise, so a decision never invents a grant the suspension did not request (fail-closed).