fix(approval): show human gateway approval reasons

[viggomeesters]

Summary

• expand dangerous-command approval labels into human-readable gateway reasons
• show visible fallback reason for empty descriptions in Telegram approval prompts
• preserve repo-local go-workflow ignore entries while merging current upstream main

Test plan

• HERMES_CRON_SESSION= python3 -m pytest tests/tools/test_approval.py tests/gateway/test_telegram_approval_buttons.py -q -o 'addopts='

[teknium1]

Thanks for addressing an approval prompt that currently exposes terse detector labels.

Problems

• Current main now constructs gateway approval text through the combined guard at tools/approval.py:2790-2825; the patch predates that route. A salvage needs to expand the presentation description there while retaining the stable approval pattern_key.
• The patch hard-codes Dutch strings in tools/approval.py and gateway/platforms/telegram.py, while language selection is configured through agent/i18n.py:212-252. This would change the default English prompt regardless of display.language.
• The approval fix is bundled with 68 changed files / +3,835 lines, including .go-workflow/runtime/go_workflow/__main__.py:1-1407, which is unrelated to this behavior.

Suggested changes

• Keep only the focused approval change; exclude the workflow files and unrelated ignore rules.
• Port reason formatting to the current combined gateway path and add an end-to-end gateway-payload test.
• Use English defaults or agent.i18n.t() for localized static UI text.

Automated hermes-sweeper review.

[teknium1]

These hard-coded Dutch strings are used beyond Telegram, but current language selection is centralized in agent/i18n.py. Please keep the default English or add translation keys and render through t() so display.language remains authoritative.

[teknium1]

This 1,407-line workflow runtime is unrelated to the approval-reason fix. Please remove it from this PR so the approval change can be reviewed and salvaged independently.