Approval gate / receipt safety

Approval receipts stay locked until human decisions are complete.

A no-write guardrail over the first 20 product and price approval rows. It names the receipt targets, validates readiness, and proves no receipt writer should run yet.