fix: halt programmatic tool calls for pending client tool approval (#19052)