Extends Dune.Allowlist.Default with exactly one additional permitted function: the CodeAct tool dispatcher. Generated code may call user tools only through Dsxir.Predictor.CodeExec.ToolBridge.call/3; everything else remains under the default safe allowlist.