fix(session): match approvals to the exact parked call

[TheGreatAxios]

Summary

• Approval resume resolves the parked call through an exact ContextStore lookup and never falls back to identical name-and-args history matching
• Exact-call timeout checks run on captured history before the gate and again after it

Verification

• Approval suites pass (55 pass, 0 fail) and the director set passes (148 pass, 0 fail)
• bun run check passes (exit 0)

Fixes CL-7998

[linear-code]

CL-7998