Human-in-the-loop approvals: REST endpoints, Spring Security, Modulith events.