Approvals

Pending magic-link approvals routed to operator email. Approve/reject still happens in the existing flow; this page is a read-only mirror in Phase 1.