A later provider session in the same thread reusing a clientRequestId got
the earlier session's card back, even for another machine. The card id now
includes the caller's request namespace, as the command id already did.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>