feat/add-dual-approval-workflow
main
Adds the shared dual-approval caller workflow, mirroring all other plugin repos. Enforces the CTO + QA dual approval policy as a GitHub required status check. Resolves the gap identified in PRI backlog (dd33f62f).