Mirrors Python POST /api/hyper-ai/confirm-tool
(backend/api/hyper_ai_routes.py::confirm_tool). When the Hyper AI worker
encounters a tool that requires user approval it registers a pending
confirmation on the HyperAiConfirmationManager; this route resolves it so
the worker can resume execution.
Session token issued by POST /api/users/login, transported as Authorization: Bearer <token>.