Consider spliting tools by read/write capabilities

With current tools is hard to build agent having only read access. Assuming I want to have **plan** and **build** mode I can't easly configure it.

Did you thought about such distiction? How it should be implemented?

I can work on PR but I'm curious about your opinion.