Approvals

Approvals

Review-first queue for sensitive runtime and connector operations.

Approval queue scaffolded; decisions are recorded via `approval_requests` and `audit_logs`.