Phase 3: approval gate, execute intent, approve/reject routes

- New: app/approval.py — HMAC-signed tokens, pending action store, 15-min TTL
- New: /approve/{token} and /reject/{token} GET routes (public, for Discord links)
- New: /internal/queue-action POST (for Citadel propose_file_change)
- New: execute intent in classifier — restart/rebuild + agent name queues action
- Updated: tools.py — notify_raven_with_actions, call_qyburn_rebuild/restart
- Updated: intent.py — EXECUTE_VERBS, STACK_NAMES, extract_execute_target
- Updated: SYSTEM_PROMPT reflects Phase 3 capabilities
- Updated: docker-compose.yml — JON_SECRET, JON_PUBLIC_URL, RAVEN_URL, QYBURN_URL

docker-compose.yml

@@ -18,6 +18,10 @@ services:
       PLANE_API_KEY: ${PLANE_API_KEY}
       AGENT_OS_DIR: /opt/agent-os
       SITES_DIR: /opt/sites
+      RAVEN_URL: ${RAVEN_URL:-http://raven-notify:8400}
+      QYBURN_URL: ${QYBURN_URL:-http://qyburn-coder:8700}
+      JON_PUBLIC_URL: ${JON_PUBLIC_URL:-https://jon.nxm.co.za}
+      JON_SECRET: ${JON_SECRET}
     networks:
       - proxy