Inject a user message into a running agent execution.
The message is queued for the agent to absorb at its next natural breakpoint (between iterations). It is also persisted immediately to the conversation history.
Returns 409 if no active execution exists for the conversation.