Approval flow: Biometric gate, background notifications, adaptive tiers

[raulriera]

Advanced approval tiers beyond the current inline cards:

• Biometric gate via LAContext for sensitive capabilities
• Background notifications via UNNotificationAction for approvals when app isn't focused
• Adaptive tier learning — per-project trust profiles based on user behavior

See opportunity doc for full design.