Reminder: the read_note tool should only ever read files inside notes/.
