fix(approval): discard expired decisions instead of ordinary input

[TheGreatAxios]

Summary

• Approval decisions carry a typed intent header and the reactor discards expired, consumed, or duplicate typed decisions before parsing so they never become ordinary input
• Header and body outcomes must agree and the correlation claim spans validation through publish

Verification

• Reactor acceptance plus approval suites pass (84 pass, 0 fail) and the director set passes (148 pass, 0 fail)
• bun run typecheck and bun run build pass; the full check passes except the by-design scope-guard leg on uncommitted vendor changes, which clears on commit

Fixes CL-8000

[linear-code]

CL-8000