[evidence] /operating_context shows wrong confirmation required status for spark access setup

[Acone8]

Before: /operating_context shows "Next safe access action: spark access setup (run policy: auto_safe, confirmation required: no)" but running spark access setup actually requires typing "approve access change" as confirmation.

Expected: The AOC should accurately report confirmation required: yes for spark access setup since the command blocks waiting for interactive confirmation before proceeding.

Repro steps:

1. Send /operating_context in Telegram
2. Observe: Next safe access action: spark access setup (run policy: auto_safe, confirmation required: no)
3. Run spark access setup --json in terminal
4. Observe: Spark needs confirmation before continuing. Type exactly: approve access change
5. The confirmation required status is incorrect in the AOC

After fix: /operating_context now correctly shows run policy: confirm_once, confirmation required: yes for spark access setup instead of auto_safe and no.