Deploy approval service and verify native persistence and audit

Assistant: codex
Assistant-Model: gpt-6-astra
Assistant-Session: 01a09cbb-87c6-7900-a145-4ce53ba9f1a6

deploy/approval-engine.yaml

@@ -35,6 +35,7 @@ spec:
       labels:
         app.kubernetes.io/name: approval-engine
     spec:
+      automountServiceAccountToken: false
       securityContext:
         runAsNonRoot: true
         runAsUser: 10001
@@ -78,7 +79,7 @@ spec:
           ports:
             - {name: http, containerPort: 8080}
           resources:
-            requests: {cpu: 50m, memory: 64Mi}
+            requests: {cpu: 25m, memory: 64Mi}
             limits: {cpu: 500m, memory: 256Mi}
           securityContext:
             allowPrivilegeEscalation: false