brokerd: recall and memory, decided under built-in grants

Implemented-By: OpenCode session (model recorded in docs/implementer-log.md)

crates/brokerd/src/config.rs

@@ -113,6 +113,8 @@ impl Runner {
             crate::args::ToolName::WriteFile => self.write_file_ms,
             crate::args::ToolName::Shell => self.shell_ms,
             crate::args::ToolName::HttpFetch => self.http_fetch_ms,
+            // `memoryd` runs these; they never reach a container.
+            crate::args::ToolName::Recall | crate::args::ToolName::Memory => self.read_file_ms,
         };
         std::time::Duration::from_millis(ms)
     }