Approvals

Approval queues and actions will live here.
Backend permissions and approval rules will remain owned by FastAPI.