Link quarantine refusals to authorized review history

[time-attack]

Summary

• link quarantine refusals to authorized session history across direct Slack, web, approval-resume, and addressed async-recovery paths
• canonicalize and validate HTTP(S) review URLs, resolve legacy recovery thread references, and render safe web links without exposing internal screening reasons
• accurately describe Auto, Strict, Dangerous, and command-policy behavior

Security enforcement is unchanged; this only corrects user-facing copy, review handoff wiring, safe rendering, and posture documentation.

Fixes #574, reported by @ianTPE.

Verification

• 104 affected root tests passed
• 30 affected web tests passed
• root, contract, and web typechecks passed
• ESLint, oxlint, Prettier, and diff checks passed
• independently reviewed and approved after two review passes

Real Slack QA was not performed because the full dev instance was blocked by unavailable local Docker/Sprites infrastructure. A synthetic browser demo using the branch's actual shared formatters, resource registry, and safe Lit link renderer was completed instead; no production data or credentials were used.

---

^{Need help on this PR? Tag @codesmith-bot with what you need. Autofix is disabled.}

[time-attack]

Rendered quarantine-review handoff

This uses the branch's actual shared formatters and safe web link renderer with synthetic local data. It is a rendering/wiring demonstration, not a screenshot of a real Slack workspace. Direct refusal, addressed recovery, stored web refusal, and the no-admin-URL fallback are shown.