Why: only the deploy invocation carried RDM_DISABLE_EXEC_TOOLS; the trailing restart ran without it and the serve died on keyless runners under the bwrap fail-closed policy (run 3765). Evidence: local suite green; the restart now inherits the hard-disable. Impact: tests only.