`approval.*` diagnostics

Owner: the runtime spec (defs/runtime.ts). The status is the code's own; the exit comes from its category (CATEGORIES). A warning or info code never sets the status or the exit.

Code	Category	Severity	Status	Exit	Retry	Fix	Args
`approval.expired`	state	error	409	5	no	—	`request`, `status?`
`approval.input_lost`	state	error	409	5	no	—	`request`
`approval.not_approver`	policy	error	403	4	no	—	`request`
`approval.not_pending`	state	error	409	5	no	—	`request`, `status?`
`approval.requester_standing_changed`	state	error	409	5	no	—	`request`
`approval.rule_invalid`	schema	error	400	2	no	—	`action`, `reason`
`approval.run_refused`	state	error	409	5	no	—	`request`, `refused`, `precondition?`
`approval.self`	policy	error	403	4	no	—	`request`

approval.* diagnostics

`approval.*` diagnostics