Pre-send approval & freeze

In System config → Mail & approval:

• Enable human review before send and save.
• Set approval mailbox; optional approve by email link.

Semantics (important):

• Before the queue, the system builds and freezes outbound content (recipients, subject, body, attachment paths).
• The approval UI must show that frozen snapshot; after approve, only send — do not rewrite body or regenerate files.