User Registration Approvals

Every approval records an explicit outcome: role granted, no access (confirmed), or rejected.