A-165 callers: the tool runner refuses a seat verb's caller outside its effective callers before the bundle

Where serveSeats answers a seat's verb it reads the verb from the runner's seat list (seatdef's
EffectiveCallers): an unproven caller is refused, and every caller while the seat's definition is unread,
names no such verb or opens it to none; a proven caller is among them, since the grants part composes the
call subject only for the effective callers. A module's tool on the subject naming no caller is unchanged.

Builds: design 47 G §610; lead answers A-165, A-179

Claude-Session: https://claude.ai/code/session_01NcbgfGKaxw984XyAPfLm4h

node-tools/cmd/node-tools/main.go

@@ -85,7 +85,7 @@ func main() {
 		Build: os.Getenv(runtime.FingerprintWord), Hear: hearOne(conn)})
 	// A failed read or write of the state approvals is made again at the next membership change the runner hears (A-157).
 	conn.OnMembership(func(bus.Membership) { go gate.StateAgain() })
-	opts = append(opts, runtime.WithGate(gate))
+	opts = append(opts, runtime.WithGate(gate), runtime.WithSeatDefinitions(definitionsOf(seatList)))
 	// A run still unrecorded is asked again at each start and when the hand-act seat's holder is heard again (lead answer A-157).
 	if stopBounds, err := gate.WatchBounds(); err != nil {
 		log.Printf("[mesh-tools] the gate's bound keys are not watched (%v): an unanswered hand-act is said in the log only", err)