P5: Action tools (create ticket, manage DNS, restart, request upgrade)

Imported from GitHub issue El-SaMa/oma#65 by @El-SaMa.

State-changing tools routed through entitlement checks.