Follow-up to the #68246 salvage. The backend permission-mode resolution only checked the DB session_id the tool path passes, but gateway /yolo keys approval bypass off the gateway session_key (contextvar). Consult both namespaces so /yolo works on messaging platforms, not just CLI/TUI. Adds a regression test driving the real approval contextvar + yolo toggle path E2E.