Why the destructive tool is a separate tool
MPP-13 closes a payment channel. The settlement is final, the channel cannot
be reopened, and no later check can run against it.
An allowDestructive: true parameter would be a boolean an agent could set for
itself, which is not human consent in any meaningful sense. Registration-time
gating is stronger: the tool does not exist unless a person started the process
intending it to. When it does exist it still requires destructiveChannel
naming the channel it may close, and still refuses if the target's challenge
advertises a different address.
The reasoning is in ../design/destructive-checks.md.
