fix(awooop): authenticate approval decisions

apps/web/src/app/[locale]/awooop/approvals/[run_id]/page.tsx

@@ -281,6 +281,11 @@ export default function ApprovalDecisionPage({
   }, [fetchRun]);
 
   const handleApprove = async () => {
+    if (!run?.project_id || run.project_id === "--") {
+      setActionError("缺少 project_id，無法送出審批決策");
+      setShowApproveDialog(false);
+      return;
+    }
     setActionLoading(true);
     setActionError(null);
     try {
@@ -290,8 +295,8 @@ export default function ApprovalDecisionPage({
           method: "POST",
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify({
+            project_id: run.project_id,
             decision: "approve",
-            approver_id: "operator",
             reason: null,
           }),
         }
@@ -309,6 +314,11 @@ export default function ApprovalDecisionPage({
   };
 
   const handleReject = async (reason: string) => {
+    if (!run?.project_id || run.project_id === "--") {
+      setActionError("缺少 project_id，無法送出審批決策");
+      setShowRejectDialog(false);
+      return;
+    }
     setActionLoading(true);
     setActionError(null);
     try {
@@ -318,8 +328,8 @@ export default function ApprovalDecisionPage({
           method: "POST",
           headers: { "Content-Type": "application/json" },
           body: JSON.stringify({
+            project_id: run.project_id,
             decision: "reject",
-            approver_id: "operator",
             reason,
           }),
         }