Write atom that adds a new pending tool approval request.

Called by useAgent when an approval-required event arrives.