[Feature]: configurable approval-locked command patterns for dangerous/disruptive local actions

The set of commands requiring dangerous-action approval is currently hard-coded in tools/approval.py, so users cannot mark installation-specific or operationally-disruptive commands as approval-required without patching the source; the issue requests a configurable mechanism.