Route Auto-posture tool-result quarantines through a HiLO release approval (#676)

* feat: route Auto-posture tool-result quarantines through HiLO release approval

A strict security-screen verdict on tool output previously replaced the
payload with a quarantine stub and dead-ended: the model never saw it and
no human was notified. Keep the stub (the payload stays out of model
context), but also raise a HiLO approval card to the requesting human
showing the screen reason and a sanitized preview, with once-only release
(no session/always grants) and deny-by-default. Approving replays the
turn with a one-shot release grant consumed by the screen hook; the
release and the quarantine are both audited.

Co-Authored-By: QM <qm@ycombinator.com>

* chore: drop incidental lockfile churn

---------

Co-authored-by: Sprite <noreply@sprites.dev>
Co-authored-by: QM <qm@ycombinator.com>