Function require_glasses_consent 

pub fn require_glasses_consent(
    cx: &Cx,
    capability: GlassesCapability,
    receipt: &ConsentReceipt,
    session: &EdgeId,
) -> Result<()>

Requires kernel authority, visible consent, and same-session receipt ownership.