Lean V3 invoice approval. Runs the approval-time tax reverify gate (pre-commit); on a material tax change beyond the org policy the invoice stays in draft (409). Accounting/webhooks/sync are not run by this endpoint yet.