Adding Granular Permission for Read / Edit Tools

[dbpolito]

Tweaking read permission check to be more consistent with Edit.

Adding better docs for Read / Edit permissions.

Also added some testing for both read / edit, maybe it's too much, we can definitely cleanup.

Some context: https://github.com/anomalyco/opencode/issues/539#issuecomment-3543698850