docs(changelog): note the #4948 stale-approval-card fix

[nesquena-hermes]

CHANGELOG entry for the approval-mirror request_id fix shipped in #7093 (was merged without a changelog note). Docs-only.

[greptile-apps]

Greptile Summary

The PR adds an Unreleased changelog entry describing the approval-mirror request_id fix shipped in #7093.

• Documents how stale local approval cards are reconciled and cleared.
• References the originating report, Stale gateway approval mirror after stream cancel/fork: 409 gateway_run_unavailable while pending card remains (#4771 follow-up) #4948.

Confidence Score: 4/5

The documentation is non-blocking, but the changelog entry should be removed from this standalone PR and left to the release workflow.

The only accepted concern is that this PR directly modifies a file reserved for release commits; no runtime or security behavior is changed.

Files Needing Attention: CHANGELOG.md

Important Files Changed

Filename	Overview
CHANGELOG.md	Adds an accurate-looking release note, but does so outside the repository’s release-owned changelog workflow.

_{Reviews (1): Last reviewed commit: "docs(changelog): note the #4948 stale-ap..." | Re-trigger Greptile}

[greptile-apps]

Changelog bypasses release ownership

This standalone PR adds an entry directly to CHANGELOG.md, bypassing the repository’s release-owned changelog process and splitting release-note ownership between contributor PRs and release commits; keep the wording in the PR body for the release workflow instead.

Suggested change

- **A stale approval card no longer dead-ends with "Approval response not accepted."** On the local backend, clicking a dangerous-command approval card whose approval had already been resolved or cleared could leave the card stuck showing an error, because WebUI failed to match the resolved approval back to its producer (the agent core delivers the approval as a copy that carries a `request_id` but no `approval_id`, so the existing identity/`approval_id` matches both missed and a tokenless mirror was orphaned). WebUI now also matches on the core's per-approval `request_id`, so a resolved/stale card clears gracefully. (#4948)

Rule Used: Do not flag missing CHANGELOG.md updates on indivi... (source)

Note: If this suggestion doesn't match your team's coding style, reply to this and let me know. I'll remember it for next time!