Make access requests visibly one-shot

[ael-dev3]

Summary

• latch Request Access locally on the first gesture and immediately show a disabled Request Sent action
• preserve the authoritative disabled Request Received state when SpacetimeDB already contains the current petition
• cover rapid repeated clicks, pending confirmation, and persisted-request behavior
• release the frontend-only change as Alpha 0.3.34

Validation

• 2,804 tests passed across 259 files with one worker
• TypeScript project build passed
• production build and Mini App verification passed
• file-size and license policies passed
• npm audit found 0 vulnerabilities
• all 576 registry signatures verified

No SpacetimeDB schema/module publication or production-data mutation is required.