fix(relay): harden approval action routing

[zikolach]

Summary

• keep Telegram approval callback payloads under Bot API limits
• resolve approval decisions by stored approval request/session instead of active selection
• require configured approval rule patterns to match and recheck Discord/Slack allow-lists

Verification

• npm run typecheck
• npm test
• openspec validate add-relay-approval-gates --strict