Remove MCP servers now requires confirmation; session errors no longer hang

Removing MCP servers, plugins, or hook sources in Extensions modal now asks for confirmation. Session creation failures show error message instead of hanging. Auto-compact that fails due to expired token lets you log in and automatically retry.