Currently when setting the server to read_only mode, this only applies to database operations:
execute_sql (by running as read only postgres user)
apply_migration (by rejecting the tool)
We should change this to also reject the following mutating tools:
create_project
pause_project
restore_project
deploy_edge_function
create_branch
delete_branch
merge_branch
reset_branch
rebase_branch
update_storage_config
We should also update the readme accordingly.