fix: deduplicate CI watchers and remove task ID from watcher prompts

Prevent duplicate CI completion notifications in paired rooms by checking
for existing active watchers with the same channel+provider+metadata before
creating a new one. Remove Task ID from watcher prompt construction to
avoid router secret redaction (task- IDs contain sk- pattern), passing
EJCLAW_RUNTIME_TASK_ID via env var instead and making cancel_task
auto-resolve when task_id is omitted.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

src/ipc-auth.test.ts

@@ -563,9 +563,6 @@ describe('schedule_task schedule types', () => {
 Watch target:
 GitHub Actions run 123456
 
-Task ID:
-task-watch-ci
-
 Check instructions:
 Check the run.
         `.trim(),
@@ -598,9 +595,6 @@ Check the run.
 Watch target:
 GitHub Actions run 654321
 
-Task ID:
-task-watch-github
-
 Check instructions:
 Managed by host-driven watcher.
         `.trim(),