Give loopd's tool port approvals, its own clock and plain denials

Implemented-By: OpenCode session (model recorded in docs/implementer-log.md)

crates/loopd/src/main.rs

@@ -108,7 +108,7 @@ fn run_serve(path: &str) -> ExitCode {
         cfg,
         client,
         Box::new(FakeTools::new()),
-        Registry::m2b(),
+        Registry::m3a(),
     ));
     if let Err(e) = channel::serve(listener, ctx) {
         eprintln!("loopd: the channel server stopped: {e}");