Fix RCE via custom tool input_model

[rishsriv]

Fixes #496, a critical security bug on an endpoint meant for testing.

Summary

• validate input_model definitions for custom tools
• restrict builtins when executing user supplied model code
• load and execute custom tool models without using temp files

Testing

• pytest tests/backend_routes/test_tools.py