A change-approval webhook retries on timeout and opens duplicate maintenance windows for the same deployment

One release becomes two approved windows because the idempotency key was not preserved across retries.