Skip Ungated Agent Drafts

Reconcile the queue to the agent's audience: skip PENDING drafts whose customer no longer passes the agent's activity gate (e.g. after adding a total_spent_cents > 0 gate to exclude trial-cancellers from a paid-winback).

Safe by construction: skip-only, DB-only, pinned to workspace + agent + pending; an empty gate skips nothing. dry_run defaults TRUE — it reports who WOULD be skipped and writes nothing; pass dry_run=false to actually skip. Bulk approve/send is never part of this path.