fix: default tool sync apply to dry run #140

Job	Run time
content-guard	5s
test (3.11)	14s
test (3.10)	17s
test (3.12)	28s
install-from-source (workspace+none, --depth workspace --harnesses none)	14s
install-from-source (repo+codex, --depth repo --harnesses codex)	15s
install-from-source (workspace+codex+openclaw, --depth workspace --harnesses codex,openclaw)	14s
install-from-source (kitchen-sink, --depth workspace --harnesses claude,codex,openclaw,hermes)	13s
install-from-source (workspace+claude+openclaw, --depth workspace --harnesses claude,openclaw)	20s
install-from-source (repo+claude+publisher, --depth repo --harnesses claude --include publisher)	14s
install-from-source (repo+claude, --depth repo --harnesses claude)	13s
	2m 47s

Provide feedback