fix(ai-pi-stream): only run approved pi tools that need approval, and keep pi system messages on the server

An automatically generated fix could have been available for this error, but the fix-ci step hasn't completed. Ensure it's configured to always run in your CI pipeline to get automatic fixes in future runs. For more information, see the Self-Healing CI docs.