The tool's returned content, capped to HOOK_TOOL_OUTPUT_LIMIT. When the
full output exceeded the cap, the value ends with
TOOL_OUTPUT_TRUNCATION_MARKER so a consumer (e.g. a secret/policy scanner)
can tell a truncated result from a genuinely short one.