feat(agents): route high risk through controlled automation

apps/api/src/services/agent_langgraph_adapter.py

@@ -247,8 +247,23 @@ def _risk_level(state: dict[str, Any], plan: dict[str, Any]) -> str:
 
 def _requires_human_approval(risk_level: str, plan: dict[str, Any]) -> bool:
     action = json.dumps(plan, ensure_ascii=False).lower()
-    return risk_level in {"medium", "high", "critical"} or any(
-        marker in action for marker in ("restart", "scale", "deploy", "write", "terminate")
+    return risk_level == "critical" or any(
+        marker in action
+        for marker in (
+            "break-glass",
+            "secret",
+            "credential",
+            "authorization header",
+            "private key",
+            "drop database",
+            "truncate",
+            "delete pvc",
+            "delete namespace",
+            "force push",
+            "ref deletion",
+            "external attack",
+            "paid provider",
+        )
     )