Approval gate / dry run

Receipt envelopes are previewed, not written.

A no-write automation surface showing the first 20 approval receipt envelopes that will be created only after human decisions pass the guardrail.