fix(i18n): add MCP tool scoping strings for the agent tool picker

mateclaw-ui/src/i18n/locales/en-US.ts

@@ -1212,10 +1212,12 @@ export default {
       searchSkills: 'Search skill name, description, or version',
       searchTools: 'Search tool name, description, source, or group',
       advancedToolsTitle: 'Advanced: Hand-picked atomic tools',
-      advancedToolsHint: 'Skill bindings already auto-expand allowed tools. Use this only for built-in micro-utilities not packaged as a skill (e.g. datetime, delegate_agent).',
-      toolUnionHint: 'Tools selected here are unioned with tools from any bound skills. MCP servers enabled at the system level are available to this agent by default — ticking MCP rows here only records an explicit binding, leaving them unticked does not block the agent. To deny a specific MCP tool, configure it under Security → Tool Guard.',
-      mcpAutoIncludedBadge: 'Auto-available',
-      mcpAutoIncludedTooltip: 'MCP servers enabled at the system level are available to every agent by default. Ticking only records an explicit binding; leaving rows unticked does not restrict this agent. To deny a specific MCP tool, configure it under Security → Tool Guard.',
+      advancedToolsHint: 'Skill bindings already auto-expand allowed tools. Use this to pick built-in micro-utilities not packaged as a skill (e.g. datetime, delegate_agent), or tick specific MCP tools to scope which MCP tools this agent may use.',
+      toolUnionHint: 'Tools selected here are unioned with tools from any bound skills. If you tick specific MCP tools, this agent may call only the ticked MCP tools; if you tick none, every MCP tool enabled at the system level stays available by default. To deny an MCP tool when none are ticked, configure it under Security → Tool Guard.',
+      mcpAutoIncludedBadge: 'Available by default',
+      mcpAutoIncludedTooltip: 'No MCP tool is ticked, so every MCP tool enabled at the system level is available to this agent by default. Ticking specific MCP tools switches this to ticked-only. To deny an MCP tool in this state, configure it under Security → Tool Guard.',
+      mcpScopedBadge: 'Scoped',
+      mcpScopedTooltip: 'Specific MCP tools are ticked, so this agent may call only the ticked MCP tools; unticked MCP tools are unavailable.',
       toolStaleBadge: 'Cached (offline)',
       toolStaleTooltip: 'The owning MCP server is not currently connected. This tool entry comes from the last successful snapshot; the LLM will not invoke it until the connection is restored.',
       toolUnavailableBadge: 'Unavailable',

mateclaw-ui/src/i18n/locales/zh-CN.ts

@@ -1104,10 +1104,12 @@ export default {
       searchSkills: '搜索技能名称、描述或版本',
       searchTools: '搜索工具名称、描述、来源或分组',
       advancedToolsTitle: '高级：手选原子工具',
-      advancedToolsHint: 'Skill 绑定已自动展开 allowed-tools。此处仅用于未打包成 Skill 的内置微工具（如 datetime、delegate_agent）。',
-      toolUnionHint: '直选工具会与已绑定技能提供的工具合并生效。MCP 服务在系统层启用后默认对此 Agent 可用，勾选 MCP 行只是显式记录绑定，不勾也能调用。需要禁用某个 MCP 工具请到「安全 → 工具防护」配置黑名单。',
-      mcpAutoIncludedBadge: '自动可用',
-      mcpAutoIncludedTooltip: 'MCP 服务在系统中启用后，其工具对所有 Agent 默认可用。勾选只用于记录显式绑定，不勾不会限制此 Agent 调用。如需禁用，请在「安全 → 工具防护」配置。',
+      advancedToolsHint: 'Skill 绑定已自动展开 allowed-tools。此处用于直选未打包成 Skill 的内置微工具（如 datetime、delegate_agent），也可勾选具体 MCP 工具来限定该 Agent 的 MCP 使用范围。',
+      toolUnionHint: '直选工具会与已绑定技能提供的工具合并生效。若在此勾选了具体的 MCP 工具，则该 Agent 仅能调用所勾选的 MCP 工具；若一个 MCP 工具都未勾选，则系统层已启用的 MCP 工具默认全部可用。需要在未勾选场景下禁用某个 MCP 工具，请到「安全 → 工具防护」配置黑名单。',
+      mcpAutoIncludedBadge: '默认可用',
+      mcpAutoIncludedTooltip: '当前未勾选任何 MCP 工具，系统层已启用的 MCP 工具默认全部对该 Agent 可用。勾选具体 MCP 工具后将切换为「仅勾选项可用」。如需在此状态下禁用某个 MCP 工具，请在「安全 → 工具防护」配置。',
+      mcpScopedBadge: '已限定范围',
+      mcpScopedTooltip: '已勾选具体 MCP 工具，该 Agent 仅能调用所勾选的 MCP 工具，未勾选的 MCP 工具不可用。',
       toolStaleBadge: '离线缓存',
       toolStaleTooltip: '该 MCP 服务当前未连接，工具列表来自上次连接时的快照；连接恢复前 LLM 不会调用这个工具。',
       toolUnavailableBadge: '不可用',