Approval Queue

Governance backbone — every deploy, merge, publish, spend, and role change requires an explicit decision