Agents guide: tool-permission samples match the SDK

The TypeScript sample that sets an agent's permissions now passes the definition directly to agents.update, and the sample that lists held tool calls passes state as an array ({ state: ["open"] }). Both samples previously failed to typecheck against the withruntime package.