visible_servers() calls the resolver, not the store, so the BYOK
visibility check crashed with AttributeError for every non-admin
run (user sessions, recalls, synapse reactions) and silently
dropped all gated servers from the tool list. The resolver now
delegates to the store through the same async factory resolve()
uses; any failure resolves to an empty dict — no personal keys —
instead of an exception.