Session capabilities never grant delete/rename while a session is parked awaiting approval

Symptom

A session parked awaiting approval cannot be deleted or renamed. Any client showing capability-gated actions on such a session sees both denied, with a daemon-supplied reason of awaiting_approval. There is no way to get rid of a session you no longer want, short of resolving an approval you don't want to resolve.

Root cause

This is a daemon-side capability decision, not a client bug. The session row's canRename/canDelete capabilities — and the awaiting_approval denial reason attached to them — are computed daemon-side and simply passed through by the client; a client that gates its UI on those capabilities (rather than re-deriving eligibility itself, which is the correct client-side discipline) will always see both actions denied while the session sits in StateAwaiting.

So the fix belongs on the daemon side of the boundary: nothing in a client's rename/delete affordance is wrong, the daemon just never offers those capabilities for a parked session today.

Proposed fix

Grant delete (and arguably rename) while a session is StateAwaiting, with delete cancelling the parked run as part of the operation. A session parked on a human verdict is waiting on the operator by definition — the operator choosing "discard this entirely" is a legitimate resolution of that wait, not a race against an in-flight run.

Worth deciding together with the parked-run-cancellation issue (previously filed as #653, now reworded to describe the general daemon bug), since both hinge on what a parked run is allowed to outlive.

Open lookup

Where the session-row capabilities set and the awaiting_approval denial reason are computed daemon-side has not been pinned down yet — that's the first thing to find when picking this up.

No file or test is named; first locate the daemon-side computation of the session-row capabilities and the awaiting_approval denial reason, then inspect how StateAwaiting is handled. Review issue #653 alongside this work, and consider the intended rename behavior. Done means a parked session can be deleted, deletion cancels the parked run, and the resulting capability decisions are covered by tests.