A-9 tests: a bundle not serving its marked tool is refused at the load; a withheld marked call is said so

The runtime's load test gains rows (run with the Python fixture, before the bundles' skip): a bundle whose
marks name a tool it does not register serves no tool of its module, and one that registers it serves.
mesh_call's failure words move into Surface.callFailed, whose rows hold that only a marked tool reaching no
responder names withheld and mesh-grants.grants_user_list.

Builds: design 46 7-approval-mark §4, §6, §22

Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h

node-tools/internal/console/wait_test.go

@@ -554,17 +554,23 @@ func TestMeshWaitIsAnnouncedAmongSeven(t *testing.T) {
 func fmtAnswer(out map[string]any) string { raw, _ := json.Marshal(out); return string(raw) }
 
 // fakeApprovals is a gate as mesh_approvals reads it.
-type fakeApprovals struct{ cancelled string }
+type fakeApprovals struct {
+	cancelled string
+	// marked is the one `<module>.<tool>` its Describe says is marked.
+	marked string
+}
 
 func (f *fakeApprovals) List() ([]approval.Listed, error) {
 	return []approval.Listed{{Ask: "a1", State: "asked"}}, nil
 }
 func (f *fakeApprovals) Read(id string) (approval.Whole, error) { return approval.Whole{}, nil }
 func (f *fakeApprovals) Applied() []approval.Marks              { return nil }
-func (f *fakeApprovals) Describe(_, _, _ string) (bool, string) { return false, "" }
-func (f *fakeApprovals) Again(string) error                     { return nil }
-func (f *fakeApprovals) Cancel(id string) error                 { f.cancelled = id; return nil }
-func (f *fakeApprovals) Fill() (uint64, int64, error)           { return 10, 64 << 20, nil }
+func (f *fakeApprovals) Describe(module, _, name string) (bool, string) {
+	return f.marked != "" && f.marked == module+"."+name, "entry " + module
+}
+func (f *fakeApprovals) Again(string) error           { return nil }
+func (f *fakeApprovals) Cancel(id string) error       { f.cancelled = id; return nil }
+func (f *fakeApprovals) Fill() (uint64, int64, error) { return 10, 64 << 20, nil }
 
 // A client that hangs up or cancels ends its wait at once: the subscription is closed and nothing is left
 // waiting for the timeout (the review of issue 745). Over the console's own HTTP, as an agent host calls it.