refactor: migrate approval into teaagent/approval/ package + governan… #706
security.yml
on: push
pip-audit (base/dev lockfile)
27s
bandit SAST
17s
Matrix: codeql
Matrix: optional-extra-pip-audit