Approve pending evidence-room requests and issue secure access links.

Use the request details from webhook/CRM intake. Approval requires the server-side approver API key.