feat(policy): honor step_up in settings.tool_denies (#242)