Tool for executing one trusted command without shell parsing.

This tool is parameterized. Each configured instance exposes a single executable such as git, gh, or mix, and accepts structured arguments as an array of strings. Environment variables are configured in trusted code via tool options rather than being provided by the model.