docs(openwar): named-tool fidelity rule

[PythonLuvr]

Summary

Adds a one-paragraph rule to the "Tool calls and authorization" section of openwar.md covering tool fidelity, which is distinct from authorization.

When the operator names a specific tool, substitution requires explicit re-authorization in the same session, even when a default or learned preference would suggest a different tool. Partial discretion ("a few options as you please", "whichever you prefer") covers content and style, never tool selection unless the operator explicitly opens it up.

Why this matters

The existing framework has three gates near this territory but none of them actually catch the case:

• Hard Rule #3 gates destructive and out-of-directive actions. Using Tool B instead of Tool A is not destructive, just wrong.
• authorized_costs gates whether the agent may spend on a cost category. If two tools share a category (both authorized), it doesn't help pick the right one.
• Phase 3 prompts on unauthorized calls. Substitution within an authorized category doesn't trip Phase 3.

This rule closes that gap. Tool fidelity is its own concern.

Test plan

• npm run lint passes (em-dashes + sanity)
• No code changes; framework doc only
• Optional: maintainer reads the paragraph in context and decides whether the placement after the authorize-check paragraph is the right spot

🤖 Generated with Claude Code