Remote-armed policyHelpers are dropped if arming is revoked while the helper runs

When a policyHelper is armed from remote settings, Claude Code now checks whether the arm generation changed while the helper was executing. If arming was revoked mid-run, the helper's output is discarded and a telemetry event records the drop instead of applying stale results. A status warning prefixed "remote policyHelpers entry not run: " surfaces this to the user, and it clears automatically once the remote subject changes back.