feat: synchronize CH1 vehicle control and feedback

src/cognitive_agent/server.py

@@ -294,11 +294,9 @@ class SeatDemoHandler(BaseHTTPRequestHandler):
                 str(payload.get("provider", "auto")),
                 str(payload["conversation_id"]) if payload.get("conversation_id") else None,
                 str(payload.get("execution_mode", "dry_run")),
-                approval_token=(
-                    str(payload["approval_token"])
-                    if payload.get("approval_token")
-                    else None
-                ),
+                # Hardware authorization is a server deployment policy.  The
+                # browser no longer renders or transmits an approval secret.
+                approval_token=os.getenv("COGNITIVE_AGENT_HARDWARE_APPROVAL_TOKEN"),
                 vehicle_id=(
                     str(payload["vehicle_id"])
                     if payload.get("vehicle_id")