fix: deduplicate CI watchers and remove task ID from watcher prompts

Prevent duplicate CI completion notifications in paired rooms by checking
for existing active watchers with the same channel+provider+metadata before
creating a new one. Remove Task ID from watcher prompt construction to
avoid router secret redaction (task- IDs contain sk- pattern), passing
EJCLAW_RUNTIME_TASK_ID via env var instead and making cancel_task
auto-resolve when task_id is omitted.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/github-ci.test.ts

@@ -62,9 +62,6 @@ describe('github-ci helpers', () => {
 Watch target:
 GitHub Actions run 123456
 
-Task ID:
-task-github
-
 Check instructions:
 Managed by host-driven watcher.
         `.trim(),
@@ -128,9 +125,6 @@ Managed by host-driven watcher.
 Watch target:
 GitHub Actions run 654321
 
-Task ID:
-task-github
-
 Check instructions:
 Managed by host-driven watcher.
       `.trim(),