Route intercepted exec approvals through shared review

[copyberry]

Route intercepted exec approvals through shared review

What changed

• Send Unix execve approvals intercepted by the zsh fork through the shared approval pipeline, including permission hooks, Guardian review, user prompts, and telemetry.
• Resolve the active turn and its auto-review setting when an intercepted command needs approval, so commands sent to persistent terminals use the current turn's reviewer.
• Give each intercepted command a distinct approval ID and propagate an aborted approval as a turn abort.

Testing

• Cover Guardian review for intercepted unified_exec commands and persistent terminals across turns.
• Verify repeated identical intercepted commands receive separate user approvals.