Store approval policy and sandbox mode in provider session runtime records, carry them through session recovery, and cover the behavior with provider layer tests.

Co-authored-by: codex <codex@users.noreply.github.com>