Enforce backend chat scope to limit out of scope messages to context

Pretty neat app and tool overall. The one question/issue I see if that I think you should be enforcing the assistant chat scope in the Rust backend, not only in prompt/tool routing. This will make sure that no unwanted messages are getting fetched and then sent to whatever external API provider. 