Implement the human approval inbox and resumable decisions #49

Problem

The product needs a first-class approval surface so operators can review and resume gated work rather than chasing hidden prompts.

Scope

• Track an approval inbox for command, file-write, network, and MCP decisions
• Cover how approval actions resume the owning session
• Keep pending work visible and actionable

Out of scope

• Low-level policy engine implementation beyond the product expectations
• General telemetry dashboards unrelated to approval actions

Implementation notes

• Make approval work resumable and attributable
• Align the inbox with session persistence and replay
• Keep approval types explicit to the operator

Definition of Done

• The issue defines inbox states, approval types, and resume expectations
• The issue is detailed enough to implement product flows later without ambiguity

Verification

• Review the issue against the feature spec approval flow and persistence issue

Dependencies

• Parent epic: [Epic] Build the agent catalog and fleet-management experience #16
• Related epic: [Epic] Add observability, evaluation, and trust controls #20