fix(app): bubble child agent permissions to the parent panel

[aaronflorey]

Summary

• surface descendant agent permission requests in the parent panel so nested agent flows can be approved in place
• aggregate pending permission counts through the agent hierarchy so panel badges and agent lists stay in sync with the approval UI
• add hierarchy-focused tests and keep the change scoped to this permission flow regression

Why

Nested OpenCode agent runs can pause on a child permission request while the parent panel looks idle. Bubbling those requests into the parent view keeps the approval flow visible where users are already watching the run.

Testing

• rtk npm run test --workspace=@getpaseo/app -- agent-hierarchy.test.ts use-all-agents-list.test.ts
• rtk npm run format
• rtk npm run typecheck

UI

• No screenshots or video attached. This changes the existing permission cards shown in the parent panel rather than introducing new UI chrome.