feat(orders): fluxo de aprovação — approve/reject endpoints + UIs (C5)

PATCH /orders/:id/approve e /reject com alçada role-gated; OrderDetailPage
com modais de aprovação e recusa; ApprovalQueuePage para Sandra; badge de
pendências na Sidebar; DevLogin com 4 perfis (rep, supervisor, gerente).

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

apps/web/src/cockpits/rafael/NewOrderPage.tsx

@@ -313,23 +313,14 @@ export function NewOrderPage() {
           discountPct: it.discountPct,
         })),
       };
-      const res = await apiFetch('/orders', {
-        method: 'POST',
-        body: JSON.stringify(body),
-        headers: { 'Content-Type': 'application/json' },
-      });
-      if (!res.ok) {
-        const err = await res.json().catch(() => ({}));
-        throw new Error((err as { detail?: string }).detail ?? `Erro ${res.status}`);
-      }
-      return res.json();
+      return apiFetch('/orders', { method: 'POST', body });
     },
     onSuccess: (order: { id: string }) => {
       void qc.invalidateQueries({ queryKey: ['orders'] });
       void qc.invalidateQueries({ queryKey: ['clients', clientId] });
       void navigate({ to: '/pedidos/$id', params: { id: order.id } });
     },
-    onError: (e: Error) => setError(e.message),
+    onError: (e: unknown) => setError(e instanceof Error ? e.message : 'Erro ao criar pedido'),
   });
 
   const addToCart = (p: ProductSummary) => {