refactor(app-server): simplify permission confirmation flow

Replace the per-method v1 app-server capability with a single
`permissionConfirmations` opt-in. Route both permission request
flows through that capability.

Collapse the separate preset tool feature into
`request_permissions_tool`, and make core apply accepted preset
responses so clients only confirm the user decision.

codex-rs/app-server-protocol/schema/json/v1/InitializeParams.json

@@ -40,26 +40,13 @@
             "null"
           ]
         },
-        "supportedServerRequests": {
-          "description": "Server request methods this connection knows how to render and answer.",
-          "items": {
-            "$ref": "#/definitions/SupportedServerRequestMethod"
-          },
-          "type": [
-            "array",
-            "null"
-          ]
+        "permissionConfirmations": {
+          "default": false,
+          "description": "Opt into model-initiated permission confirmation requests.",
+          "type": "boolean"
         }
       },
       "type": "object"
-    },
-    "SupportedServerRequestMethod": {
-      "description": "Server-initiated request methods a client can opt into during initialize.",
-      "enum": [
-        "item/permissions/requestApproval",
-        "item/permissionPreset/requestApproval"
-      ],
-      "type": "string"
     }
   },
   "properties": {