Add AcceptWithOverrideCommand for approval decision

[qiyaoq-oai]

Summary

• Add acceptWithOverrideCommand as a first-class command approval decision across the protocol, app-server schema/docs, and app-server event handling so clients can approve execution with a replacement command.
• Plumb override commands through the core shell/orchestrator flow so the approved replacement command becomes the effective command for execution, begin/end events, and tool output, while preserving the correct sandbox selection on retry instead of automatically escaping the sandbox.
• Tighten approval guardrails and coverage by rejecting override commands for network-only approvals

Test

Unit tests

[qiyaoq-oai]

I have read the CLA Document and I hereby sign the CLA