fix: count declared extension mutation tools

Let agents mark extension tools as mutation evidence so non-Git and untracked writes satisfy the implementation completion guard without treating all unknown tools as mutating.