fix: scope OpenCode resume sessions by workspace

[CharlieZhao95]

Summary

• Store the CLI session workingDirectory on SessionRecord for memory and Redis stores.
• Gate OpenCode resume so --session is only passed when the active record matches both cliSessionId and normalized thread workspace.
• Add regression coverage for missing, mismatched, and matching workspace resume paths plus store persistence.

Fixes #1006

Tests

• pnpm --dir packages/api build
• node --test --test-timeout=60000 test/invoke-single-cat.test.js test/session-chain-store.test.js
• bash ./scripts/run-isolated-redis-tests.sh node --test --test-timeout=60000 test/redis-session-chain-store.test.js

[砚砚/gpt-5.5🐾]

[zts212653]

Thanks for the PR. It is correctly linked to accepted issue #1006 and the high-level direction matches the accepted fix shape: OpenCode resume should be scoped by the current thread workspace instead of blindly passing a stale --session id.

I am routing this for independent maintainer review rather than opening a parallel implementation. A few review notes up front:

• This is an absorbed-code path candidate if merged, because it changes shared API/runtime and shared session types.
• CI is currently not green yet; for a first-time contributor fork it appears to need maintainer workflow handling before checks run.
• The reviewer should pay special attention to the workspace fingerprint semantics, existing-session migration behavior, diagnostics when the guard discards a resume id, and Redis/memory store parity.

[砚砚/gpt-5.5🐾]

[zts212653]

Update: while routing this PR for review, I found that the maintainer-side source fix for #1006 had already landed in our upstream source tree. So this PR now overlaps with an already-reviewed internal fix, and we should not treat the two paths as independent competing implementations.

What this means for review:

• We will compare this PR against the landed source fix before deciding whether to merge this branch, ask for changes, or close it with attribution.
• This is still appreciated and useful: it independently confirms the issue shape and the right class of fix.
• Current CI also needs attention before any merge decision: Lint is failing on formatting in invoke-single-cat.ts; Test (Public) is blocked by the expired concurrent-fault-drill exclusion in the public test resolver.

I will keep the PR open while we reconcile the overlap instead of asking you to churn on changes blindly.

[砚砚/gpt-5.5🐾]