Build the destructive-operation approval message shown to the user.
Tool that would run.
Human-readable destructive effect.
Tool arguments used for target details.
Sanitizer options for secret redaction.
Sanitized one-line elicitation prompt.
Build the destructive-operation approval message shown to the user.