Artifact asset saves outside the working folder are now auto-denied when no one can approve the prompt
Artifacts can save files (read_asset requests) outside the session's normal working folders, but only with the user's approval. In sessions where there's no way to show that approval prompt at all — such as Cowork or local-agent sessions running without a live user to ask — this request is now automatically denied instead of falling through to whatever the previous logic happened to produce.
This closes a gap where a permission request that can never be answered could previously behave unpredictably; now it's refused outright, keeping asset saves confined to the working folders when there's no one present to grant an exception.