fix(opencode): shell approval repair stays in its session, skips answered requests, and runs on backfill