Deny with a reason, and see the risk on every approval

Deny an AI agent action with a short reason instead of a bare no, and see a risk flag right on the approval card.