ApprovalManager

Gate for write operations that require user consent before execution.

Implemented by the app module to show confirmation UI (dialogs, biometric prompts, or policy-based auto-approval for agents).

The core:connector module defines only this interface — no UI code.

The suspend function allows the implementation to show a dialog and wait for the user's response without blocking.