Does the description disclose side effects, auth requirements, rate limits, or destructive behavior?
Annotations already declare destructiveHint=true and idempotentHint=false, and the description adds real context beyond them: the two divergent execution paths (re-install release on last-deploy failure vs. roll the pod) and the read-write token requirement. It doesn't state whether a restart can interrupt in-flight traffic or what the returned job state looks like, but that is largely covered by the output schema.
Agents need to know what a tool does to the world before calling it. Descriptions should go beyond structured annotations to explain consequences.