Control in-flight agent runs with approval status tracking and admin enforcement

A new approval status endpoint lets you query where a paused run stands in the approval process, and admin-gated enforcement ensures that only authorized users can continue execution. Together, these changes give teams auditable, policy-driven control over Human-in-the-Loop workflows, closing gaps between initiating a pause and resuming work.