Guardrails as Scapegoats: Auditing Unfaithful Safety Refusals in Tool-Augmented