[Fix] Review notifications omit response buttons in web tasks

[roomote-roomote]

​Opened on behalf of @daniel-lxs. Follow up by mentioning @roomote-roomote, in the web UI, or in Slack.

What changed

• Persist actionable review-notification state for web-only task conversations.
• Render Resolve, Auto-resolve, and Dismiss controls directly in the task transcript.
• Guard action handling with task/message validation, expiring claim tokens, duplicate-dispatch protection, and durable terminal states.
• Scope automatic review handling to the originating source-control provider, including provider-native actions.
• Keep provider-native chat actions separate so web controls cannot race Slack, Discord, or Telegram buttons.

Why this change was made

Actionable pull-request review notifications reached the web transcript with a follow-up question but without the controls needed to respond. The transcript now carries the same actionable experience while preserving safe behavior across refreshes, duplicate clicks, and interrupted requests.

Impact

People using the Roomote web task view can resolve review feedback, enable automatic resolution for later feedback on the PR, or dismiss the offer without typing a follow-up. Completed and abandoned action states remain consistent across reloads, and automatic handling cannot affect a colliding PR from another provider.

[roomote-community]

No code issues found. See task

• apps/web/src/trpc/commands/sandbox-session/index.ts:422 - Auto-resolve is scoped to the source-control provider.

_{Reviewed e9570ac}