fix exact Gateway approval waiter settlement

[wtj-0527]

Summary

• retain the Hermes Runtime Gateway request_id beside the exact Session and Group Run generation
• resolve interrupted and user-answered Gateway approvals by that exact request ID instead of Session FIFO
• cover an older waiter ahead of the interrupted waiter while preserving other Sessions and later Runs

Closes #2680

Validation

• npm run test -- tests/server/agent-bridge-python-concurrency.test.ts tests/server/agent-bridge-client-boundary-interrupt.test.ts tests/server/group-chat-approval.test.ts tests/server/group-chat-agent-workspace.test.ts (116 passed)
• npx playwright test tests/e2e/group-chat-room-deeplink.spec.ts --grep "removes an interrupted run approval" --project=chromium (1 passed)
• npm run harness:check
• npm run build
• git diff --check

Safety

• tests use only harmless printf approval payloads and never execute the pending commands
• no merge, release, packaging, install, deployment, or restart is included