Approvals

Placeholder. Pending approvals will stream in via /ws/system and be resolved through POST /api/approvals/{id}/resolve.