fix(web): pending-approvals-card 加防重複點擊 + loading 狀態

linter 自動強化: actioningId state 防止同一張卡重複操作
- disabled + opacity 0.6 + cursor not-allowed
- loading 時按鈕顯示 '...'
- finally() 確保 actioningId 清除

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

apps/api/src/db/base.py

@@ -164,6 +164,16 @@ async def init_db() -> None:
             """)
         )
 
+        # 2026-04-09 Claude Sonnet 4.6: Sprint 5R C1 修復 — 批准執行閉環 Telegram 訊息持久化欄位
+        # create_all 不做 ALTER，需手動補欄位
+        await conn.execute(
+            text("""
+            ALTER TABLE approval_records
+                ADD COLUMN IF NOT EXISTS telegram_message_id INTEGER,
+                ADD COLUMN IF NOT EXISTS telegram_chat_id INTEGER;
+            """)
+        )
+
 
 async def close_db() -> None:
     """