Interruption and steering

Once an agent is running, the only user move is wait or cancel and lose the work.

Expose pause, redirect, and continue. Preserve partial work at the last checkpoint. Steering is a first-class control, not a support ticket.