#1169 Santa: approval queue and automatic rule creation Issue created by javuto Part of Santa/Workshop parity, building on the Santa sync server from #1142 (

pkg/santa

,

osctrl-tls

sync endpoint, Santa page in the UI). Problem Approvers need one place to decide requests, and approving should produce the rule without manual entry. Scope • Approval queue in the Santa page: search, filter, bulk approve/deny, with event and binary context. • On approve, create the rule (scope chosen by approver: this machine, a tag, or the environment); on deny, record the reason. • Approver configuration per environment: environment admins, named users, or members of a tag group. • Notify the requester (email via existing alert channels). • Audit every decision. Acceptance • Approving a request creates exactly one rule and the client gets it on next sync. • Depends on: #1168 jmpsec/osctrl