Add fak (agent tool firewall) to Tools - #38

What

Adds fak to the Tools section.

Why it fits

fak fronts an MCP server and adjudicates every tool call before it runs — it sits right next to MCP Guardian and ToolHive in this list, but works by structure rather than scanning:

• a default-deny capability gate on the tool-call path (irreversible actions fail closed — the lever was never wired up, so containment doesn't depend on catching the attack);
• a quarantine that holds suspicious tool results out of the model's context entirely (Tool Poisoning / Memory Poisoning — the MCP Top-10 risks this list is about).

It exposes five fak_* adjudication tools to any MCP client, so it's an MCP server as well as a gate. Single static Go binary, zero external dependencies, Apache-2.0. Matched the section's - [name](url) - description format. I'm the author; description limited to what's shipped.