Stores tool calls pending user approval.

Populated when approval-required TransportEvents arrive. Consumed by useToolApproval and rendered by ToolApprovalDialog. Entries are removed via removePendingApprovalAtom after the user decides.