Attribute nested REPL reviews to their tool calls

[copyberry]

Attribute nested REPL reviews to their tool calls

What changed

• Retain MCP invocation metadata for Node-backed REPL servers so nested
  elicitations can resolve the enclosing tool call.
• Use a valid, same-server callId from the current turn as the Guardian
  assessment target while continuing to review each nested action and connector
  independently.
• Fall back to an elicitation-specific target when callId is missing,
  malformed, unknown, from another server, or from an earlier turn.

Testing

• Cover ordinary and strict reviews for node_repl and cua_repl, multiple
  nested decisions, unrelated servers, and invalid or stale call IDs.

[github-actions]

Thank you for your submission, we really appreciate it. Like many open-source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution. You can sign the CLA by just posting a Pull Request Comment same as the below format.

---

I have read the CLA Document and I hereby sign the CLA

---

_{You can retrigger this bot by commenting recheck in this Pull Request. Posted by the CLA Assistant Lite bot.}