Approval-only scheduling

Appointment requests need a human decision.

Approval changes local workflow state only. Calendar creation, rescheduling messages, and confirmations remain disabled.