Approval queue cursor pagination + real-time updates

The approval queue page uses a composite (created_at, id) cursor instead of LIMIT 200. High-volume workspaces no longer silently drop older submissions. Keyboard navigation: j/k to move between items, a to approve, r to reject, space to expand. Page-of-total badge shows pending items visible vs workspace-wide total.