Add Dataset Preapproval

Mark a dataset as preapproved for the caller's client. Compliance Admin only — preapproval bypasses the Legal & Compliance review step, so the lever belongs to compliance, not to Block Admins. Idempotent.