Asks the MCP client's user (via elicit) to approve the call. When the client can't elicit — in-process calls, clients without the capability — fallback decides, and with no fallback the call is declined.