List Shared Data Approval Events

Return per-event tool-approval lifecycle for one consenting user.

Backed by the OSS approval_events table (migration 028). The agent's approval gate writes one row per transition: requested when a tool with ASK policy fires, decided (with the ApprovalDecision) when the user replies, timed_out if the user never answers, and recovered if a worker crash left an orphan that the next boot cleaned up. Surfacing this stream lets admins see when the agent was blocked on a permission prompt and how the request resolved, which the conversation transcript alone cannot show (prompts ride through the messages table indistinguishably from ordinary replies).

description is the human-readable text shown to the user in the prompt body. It can echo user-pasted content (filenames, URLs, quoted message text), so it is PII-redacted before serialization. channel and chat_id are infrastructure metadata that route the prompt; they are not redacted.

Ordered created_at asc so a request/decided pair stays adjacent in the response, matching how the activity feed will render them.