Tool Preferences in Agentic LLMs are Unreliable