Return an HTML fragment the live-session page embeds.

Each pending approval becomes a row with three buttons that POST the resolution back to /approvals/{id}/resolve. The fragment is intentionally minimal so it can be inlined into the existing live dashboard without pulling a new framework.