Defensively reject agent-hook cwd attribution mismatches

[Jinwoo-H]

Merged #14615 pins sessions at spawn time, but this complementary guard rejects provably foreign cwd/status events. Reimplement and validate the defensive path on current main. Source PR #11094; credit @kunsanglee. No contributor action requested.