Fix four more test-only leaks found by LSan.

Tool::run() doesn't take ownership of the passed action.