Accepts either a named list of bare functions (legacy format from
increment 1) or a list of securer_tool() objects. Returns a named
list with two components: fns (tool functions keyed by name) and
arg_meta (expected argument names keyed by tool name).