fix(eve): bind approval callbacks to responders

[benpankow]

Summary

Closes the cross-user callback race for concurrent approval candidates:

• restores the persisted candidate responder into the active authorization context before resumed policy/token resolution
• prevents a later Slack click from substituting its principal into an earlier candidate OAuth callback
• retains candidate identity as the canonical responder for audit and settlement
• adds a regression with an original responder and a different latest session caller

Validation

• pnpm --filter eve exec vitest run --config vitest.unit.config.ts src/harness/input-requests.test.ts
• pnpm --filter eve typecheck

Stack

Depends on #1353.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
eve-docs	Ready	Preview	Jul 29, 2026 8:29pm
eve-docs-4759	Ready	Preview, v0	Jul 29, 2026 8:29pm

[benpankow]

Superseded by the consolidated 7-PR implementation stack starting at #1368 (GitHub stack #1375).