Expand description
Phase 3.5 SQLite-backed BatchApprovalStore.
Mirrors the single-request approval store: a WAL-journaled SQLite database with idempotent migrations. Batch records carry their own usage counters so the kernel can reconcile consumption without going back to the receipt log.