ApprovalGate

<div class="ag-card" id="agCard">
  <div class="ag-head">
    <span class="ag-title">Approval required</span>
    <span class="ag-risk">Risk: elevated</span>
  </div>
  <p class="ag-desc" id="agDesc">
    The workflow wants to run <strong>shell.exec</strong> with <code>npm run build</code> in the workspace root.
  </p>
  <div class="ag-actions" id="agActions">
    <button type="button" class="ag-btn ag-approve" id="agApprove">✓ Approve</button>
    <button type="button" class="ag-btn ag-reject" id="agReject">✕ Reject</button>
  </div>
  <p class="ag-confirm" id="agConfirm" hidden></p>
</div>