Cloud sessions: shorter resume message and internal tracking additions

What

A cloud session is a Claude Code session that runs on a remote machine. Several changes landed in how it works:

• The resume message: the message shown when a cloud session resumes changed from a warning that the copy of the conversation on the machine's disk was missing some tool calls to a short line.
• Tools whose results wait: the remote settings for holding messages back now accept tools_whose_results_wait, and a matching toolsWhoseResultsWait rule is used when deciding when to send messages on.
• Project document reads: a new project_doc_reads event type is added and counted next to poll_events, and its count is reported as project_doc_reads_count.
• New internal state: turnDeniedTools, which keeps the tools refused during a turn, and a sandbox value, unlistableWorktreesDenyApplied.

Why

Most of this is internal plumbing with no visible effect. The visible part is a shorter message when a cloud session resumes in place of the earlier warning.