Approve/Cancel BRA

POST /api/v1/bras/{bra_id}/approve

{
  "final_comment": "Assessment reviewed and approved. All risks adequately assessed."
}

{
  "data": {
    "id": "bra-uuid-001",
    "status": "approved",
    "approved_by": "user-uuid",
    "approved_at": "2026-01-16T10:00:00Z",
    "final_comment": "Assessment reviewed and approved.",
    "snapshot_id": "snapshot-uuid-001"
  },
  "message": "BRA approved successfully"
}

POST /api/v1/bras/{bra_id}/cancel

{
  "cancellation_reason": "Duplicate assessment - merged with Q2 review"
}

{
  "data": {
    "id": "bra-uuid-001",
    "status": "cancelled",
    "cancelled_by": "user-uuid",
    "cancelled_at": "2026-01-16T10:00:00Z",
    "cancellation_reason": "Duplicate assessment"
  },
  "message": "BRA cancelled successfully"
}