Approves an order in waiting_approval. Approval must be done by a different user than the one who created the order, with the approve permission (an admin or owner on the tenant). API keys without the approve permission receive a 403.

On approval, Gravv charges the source and the order moves to pending while it executes and settles.

The Idempotency-Key header is required; requests without it are rejected.