approvals: stale-wait cleanup, key-decision notify, TTLs, key/browser isolation

- bin/approvals.py: responded-wait filtering + auto-mark, key-decision sidechat-first notify (notified flag, --message, --allow-main-chat), TTL defaults (input 30m / browser 30m / key 2h), cross-type guard (browser actions cannot resolve key requests), sweep_expired_key_requests; restores check_node_key_request fallback in inspect_node_approvals

- bin/box-ctl.py + bin/super-cli.py (approvals hunks only): --message/--allow-main-chat passthrough on allow/deny, clear/clear-all actions, def sidechat routing; restores sys.exit(1) on dismiss failure

- bin/fleet-alert-check.sh: TTL-aware state_machine (EXPIRED action), auto-deny expired browser approvals (fail closed), auto-dismiss expired input waits, targeted per-agent DM for input waits

- bin/job-dispatch.py + bin/gravity.py: KEY_APPROVAL excluded from auto-approval

Reviewed by 5 independent reviewers (all APPROVE/APPROVE WITH NOTES); integration gate GO (17/17 tests). TUI hunks in super-cli.py intentionally excluded.

bin/job-dispatch.py

@@ -509,7 +509,7 @@ def main():
             import approvals
             app_info = approvals.inspect_node_approvals(agent)
             if app_info.get("has_pending"):
-                if app_info.get("is_trusted"):
+                if app_info.get("is_trusted") and app_info.get("status") != "KEY_APPROVAL":
                     print(f"Pre-dispatch: auto-approving trusted request for {agent} ({app_info.get('target')})")
                     approvals.allow_node_approval(agent, always=True, caller="job-dispatch")
                 else: