fix(session): reject tool schemas with zod internals