Approve All Org Action Proposals

Block-approve: each item walks the single-approve door's checks in its order — open check, per-item consent fingerprint, the member edits' choices, the full write gate, the granted-agents guard — and a failure becomes that item's result instead of failing the batch. The client sends exactly the rows it rendered: a proposal that landed after page load is never swept in.