fix: recover pending tool permissions

[theblazehen]

Summary

• recover pending tool permissions from server state on message load and SSE reconnect
• support legacy and v2 permission APIs, with v2 reply falling back when old servers return the web UI HTML
• route approval buttons through permission request ids while still matching recovered prompts to tool call ids
• add regression tests for v2 mapping, legacy/v2 reconciliation, and stale permission clearing

Verification

• export JAVA_HOME=/usr/lib/jvm/java-17-openjdk && ./gradlew :app:testDebugUnitTest --tests dev.blazelight.p4oc.data.remote.mapper.EventMapperTest --tests dev.blazelight.p4oc.data.session.SessionRepositoryImplTest
• export JAVA_HOME=/usr/lib/jvm/java-17-openjdk && ./gradlew :app:compileDebugKotlin
• installed debug APK on device 192.168.24.119:47293 and verified recovered approval controls for a missed bash permission
• verified tapping Allow posts legacy fallback /permission/{id}/reply on opencode 1.15.10 and UI renders completed tool output

Fixes #15