Function handle_host_widget_approval 

pub(crate) async fn handle_host_widget_approval(
    __arg0: State<AppState>,
    headers: HeaderMap,
    __arg2: Json<Value>,
) -> Response

POST /api/v1/host/widget_approval: the user’s answer to an install prompt (spec §8.3), relayed by the CEF host with its own token. The instance auth key, which every agent has, isn’t enough.