How to add human approval to MCP tool calls — no code changes

MCP servers do what agents tell them. There's no policy check between "the agent decided to run this...