Function shell_tool_for_runtime 

pub fn shell_tool_for_runtime(
    security: Arc<SecurityPolicy>,
    runtime: Arc<dyn RuntimeAdapter>,
    risk_profile: &RiskProfileConfig,
    root_config: &Config,
) -> ShellTool

Assemble a shell tool through the same runtime/sandbox ownership seam used by the production registry.