Resolves the attribute keys used to address a record for update/destroy tools.

Mirrors the identity: tool option so schema generation and execution stay in sync:

• false - no identifier keys (the caller adds no filter / no schema property)
• nil - the resource's primary key (the default)
• a name - the keys of the named identity