fix(qqbot): authorize approval clicks for DM sessions (chat_type='dm')

[luyao618]

Summary

Fixes #35760 — QQ bot approval button clicks (e.g. allow-once, allow-always) were always rejected with Rejected unauthorized approval click for session ..., blocking every tool requiring user approval until the ~280s approval timeout fired.

Root cause

gateway/platforms/qqbot/adapter.py::_is_authorized_interaction_for_session only matched chat_type == "c2c". But this adapter creates DM sessions with chat_type="dm":

# adapter.py:1282 (C2C message create handler)
chat_type="dm",
# adapter.py:1492 (friend-add handler)
chat_type="dm",

Session keys therefore look like agent:main:qqbot:dm:<openid>, which parses to chat_type="dm" and never matches "c2c", so every DM approval click falls through to return False.

Fix

One-line: accept both legacy "c2c" and current "dm" chat_type values.

-        if chat_type == "c2c":
+        if chat_type in ("c2c", "dm"):
             return bool(chat_id) and operator == chat_id

Group/guild branches are unchanged.

Tests

Adds three regression tests in tests/gateway/test_qqbot.py::TestIsAuthorizedInteractionForSession:

• test_dm_chat_type_authorizes_when_operator_matches_chat_id — the bug case
• test_c2c_chat_type_still_authorizes — backward-compat guard
• test_dm_chat_type_rejects_when_operator_mismatched — ensures we still reject impostors

Full file passes: 162 passed.

Risk

Minimal. Pure widening of an existing auth predicate. Operator-equality check is unchanged, so security posture is identical to the c2c path.

[alt-glitch]

Duplicate of #32752 (and #31593) — same one-line fix accepting "dm" alongside "c2c" in _is_authorized_interaction_for_session(). Fixes #35760 / #32528.

[luyao618]

Closing in favor of #32752 / #31593 — same one-line fix accepting "dm" alongside "c2c" in _is_authorized_interaction_for_session(). Both earlier PRs are still open. Thanks to alt-glitch for flagging.