approval-gate

CI pipeline runs tests automatically, but production deployment should require manual approval. Want automated staging deploy on merge to main, but production needs a human sign-off before deploying.