fix(cloud-task): recover pending permission prompts from the run log on reconnect

[tatoalo]

Problem

when a cloud task is awaiting a permission or plan approval and the app restarts or the renderer reloads, the pending approve/deny prompt disappears and never comes back which affects the next message which hangs. closes #1833

pending_permission_render_failure_fix.mp4

Changes

unanswered permission requests are now surviving reconnects attempts and app reboots

[greptile-apps]

_{Reviews (1): Last reviewed commit: "fix(cloud-task): restore pending permiss..." | Re-trigger Greptile}

[greptile-apps]

Prompt To Fix All With AI

Fix the following 1 code review issue. Work through them one at a time, proposing concise fixes.

---

### Issue 1 of 1
apps/code/src/renderer/features/sessions/service/service.ts:1523-1529
When a permission is recovered from the snapshot log on reconnect, `receivedAt` is set to `Date.now()` (the reconnect moment) rather than the time the permission was originally issued. `resolvePermission` uses `receivedAt` to accumulate `pausedDurationMs`, so for recovered permissions the metric only captures the post-reconnect wait time and silently drops however long the task was already paused before the restart. The log entry's `timestamp` field carries the original issue time and could be threaded through `derivePendingPermissionRequests` and `DerivedPermissionRequest` to preserve accuracy.

```suggestion
    const newPermissions = new Map(session.pendingPermissions);
    newPermissions.set(update.toolCall.toolCallId, {
      toolCall: update.toolCall as PermissionRequest["toolCall"],
      options: update.options as PermissionRequest["options"],
      taskRunId,
      receivedAt: update.receivedAt ?? Date.now(),
    });
```

_{Reviews (2): Last reviewed commit: "fix(cloud-task): recover pending permiss..." | Re-trigger Greptile}