The Swiss Army Knife Trap: Why Wrapping Every API as an Agent Tool Backfires