fix: notification click uses current window ref, dismiss on settings auto-allow

- Click handler reads this.mainWindowRef instead of captured closure ref,
  so window recreation is handled correctly
- reEvaluatePendingApprovals now calls dismissApprovalNotification when
  auto-allowing via settings change (was missing — stale notification stayed)

src/main/services/team/TeamProvisioningService.ts

@@ -5407,9 +5407,11 @@ export class TeamProvisioningService {
 
     notification.on('click', () => {
       cleanup();
-      if (win && !win.isDestroyed()) {
+      // Use current mainWindowRef (not captured `win`) in case window was recreated
-        win.show();
+      const currentWin = this.mainWindowRef;
-        win.focus();
+      if (currentWin && !currentWin.isDestroyed()) {
+        currentWin.show();
+        currentWin.focus();
       }
     });
 
@@ -5582,6 +5584,7 @@ export class TeamProvisioningService {
         if (result.autoAllow) {
           this.clearApprovalTimeout(requestId);
           this.autoAllowControlRequest(run, requestId);
+          this.dismissApprovalNotification(requestId);
           toRemove.push(requestId);
           this.emitToolApprovalEvent({
             autoResolved: true,