docs: the hive has no approval queue

config-changes.md (was approvals.md) describes config PRs, the meta flake
and helper events; the approval queue, its kinds, the withdraw path, the
job-queue dispatch and ApprovalResolved go. Every other page drops the
approvals table, endpoints, event, tool group, hivectl verbs, dashboard
section and the loose-end/cancel kind, and links to the renamed page.

docs/trust-boundary/boundary.md

@@ -18,8 +18,8 @@ always on), the gateway proxies all operator-facing traffic, and
 
 - **Operator** — reaches every UI (the dashboard + every
   per-agent page) through the gateway, on one origin.
-  The core daemon serves operator-authority actions (approve / deny,
-  answer-as-operator, lifecycle POSTs), reachable only via the
+  The core daemon serves operator-authority actions
+  (answer-as-operator, lifecycle POSTs), reachable only via the
   gateway.
 - **Agent** — speaks only for itself, only over its per-agent
   unix socket. The socket's identity _is_ the agent (see