Add institutional provenance and approval gates

tests/test_route_registration.py

@@ -38,7 +38,7 @@ def test_campaign_router_composes_every_workflow_operation_once() -> None:
     actual = _operation_keys(router)
 
     assert actual == expected
-    assert len(actual) == 64
+    assert len(actual) == 65
     assert not [operation for operation, count in Counter(actual).items() if count > 1]
 
 
@@ -50,6 +50,13 @@ def test_key_routes_are_owned_by_their_focused_router() -> None:
         (reports_router, ("GET", "/campaigns/{campaign_id}/report")),
         (sharing_router, ("POST", "/campaigns/{campaign_id}/shares")),
         (delivery_router, ("POST", "/campaigns/{campaign_id}/send-now")),
+        (
+            delivery_router,
+            (
+                "POST",
+                "/campaigns/{campaign_id}/versions/{version_id}/approval-request",
+            ),
+        ),
         (
             attachments_router,
             (