feat: Implement approvals workflow and notifications integration

- Added approvals orchestration with persistence and workflow scaffolding.
- Integrated notifications insights and staged resume hooks.
- Introduced approval coordinator and policy notification bridge with unit tests.
- Added approval decision API with resume requeue and persisted plan snapshots.
- Documented the Excitor consensus API beta and provided JSON sample payload.
- Created analyzers to flag usage of deprecated merge service APIs.
- Implemented logging for artifact uploads and approval decision service.
- Added tests for PackRunApprovalDecisionService and related components.

src/Cli/StellaOps.Cli/Commands/CommandFactory.cs

@@ -730,10 +730,11 @@ internal static class CommandFactory
         };
         activate.Add(activatePolicyIdArgument);
 
-        var activateVersionOption = new Option<int>("--version")
-        {
-            Description = "Revision version to activate."
-        };
+        var activateVersionOption = new Option<int>("--version")
+        {
+            Description = "Revision version to activate.",
+            IsRequired = true
+        };
 
         var activationNoteOption = new Option<string?>("--note")
         {

src/Cli/StellaOps.Cli/TASKS.md

@@ -49,6 +49,7 @@
 | CLI-POLICY-23-004 | TODO | DevEx/CLI Guild | WEB-POLICY-23-001 | Add `stella policy lint` command validating SPL files with compiler diagnostics; support JSON output. | Command returns lint diagnostics; exit codes documented; tests cover error scenarios. |
 | CLI-POLICY-23-005 | DOING (2025-10-28) | DevEx/CLI Guild | POLICY-GATEWAY-18-002..003, WEB-POLICY-23-002 | Implement `stella policy activate` with scheduling window, approval enforcement, and summary output. | Activation command integrates with API, handles 2-person rule failures; tests cover success/error. |
 > 2025-10-28: CLI command implemented with gateway integration (`policy activate`), interactive summary output, retry-aware metrics, and exit codes (0 success, 75 pending second approval). Tests cover success/pending/error paths.
+> 2025-11-06: Tightened required `--version` parsing, added scheduled activation handling coverage, and expanded tests to validate timestamp normalization.
 | CLI-POLICY-23-006 | TODO | DevEx/CLI Guild | WEB-POLICY-23-004 | Provide `stella policy history` and `stella policy explain` commands to pull run history and explanation trees. | Commands output JSON/table; integration tests with fixtures; docs updated. |
 
 ## Graph & Vuln Explorer v1

src/Cli/__Tests/StellaOps.Cli.Tests/Commands/CommandHandlersTests.cs

@@ -1811,11 +1811,11 @@ spec:
     }
 
     [Fact]
-    public async Task HandlePolicyActivateAsync_PendingSecondApprovalSetsExitCode()
-    {
-        var originalExit = Environment.ExitCode;
-
-        var backend = new StubBackendClient(new JobTriggerResult(true, "ok", null, null));
+    public async Task HandlePolicyActivateAsync_PendingSecondApprovalSetsExitCode()
+    {
+        var originalExit = Environment.ExitCode;
+
+        var backend = new StubBackendClient(new JobTriggerResult(true, "ok", null, null));
         backend.ActivationResult = new PolicyActivationResult(
             "pending_second_approval",
             new PolicyActivationRevision(
@@ -1852,15 +1852,65 @@ spec:
         finally
         {
             Environment.ExitCode = originalExit;
-        }
-    }
-
-    [Fact]
-    public async Task HandlePolicyActivateAsync_MapsErrorCodes()
-    {
-        var originalExit = Environment.ExitCode;
-
-        var backend = new StubBackendClient(new JobTriggerResult(true, "ok", null, null))
+        }
+    }
+
+    [Fact]
+    public async Task HandlePolicyActivateAsync_ParsesScheduledTimestamp()
+    {
+        var originalExit = Environment.ExitCode;
+        var backend = new StubBackendClient(new JobTriggerResult(true, "ok", null, null));
+        backend.ActivationResult = new PolicyActivationResult(
+            "scheduled",
+            new PolicyActivationRevision(
+                "P-8",
+                5,
+                "approved",
+                false,
+                DateTimeOffset.Parse("2025-12-01T00:30:00Z", CultureInfo.InvariantCulture),
+                null,
+                new ReadOnlyCollection<PolicyActivationApproval>(Array.Empty<PolicyActivationApproval>())));
+
+        var provider = BuildServiceProvider(backend);
+
+        try
+        {
+            const string scheduledValue = "2025-12-01T03:00:00+02:00";
+            await CommandHandlers.HandlePolicyActivateAsync(
+                provider,
+                policyId: "P-8",
+                version: 5,
+                note: null,
+                runNow: false,
+                scheduledAt: scheduledValue,
+                priority: null,
+                rollback: false,
+                incidentId: null,
+                verbose: false,
+                cancellationToken: CancellationToken.None);
+
+            Assert.Equal(0, Environment.ExitCode);
+            Assert.NotNull(backend.LastPolicyActivation);
+            var activation = backend.LastPolicyActivation!.Value;
+            Assert.False(activation.Request.RunNow);
+            var expected = DateTimeOffset.Parse(
+                scheduledValue,
+                CultureInfo.InvariantCulture,
+                DateTimeStyles.AssumeUniversal | DateTimeStyles.AdjustToUniversal);
+            Assert.Equal(expected, activation.Request.ScheduledAt);
+        }
+        finally
+        {
+            Environment.ExitCode = originalExit;
+        }
+    }
+
+    [Fact]
+    public async Task HandlePolicyActivateAsync_MapsErrorCodes()
+    {
+        var originalExit = Environment.ExitCode;
+
+        var backend = new StubBackendClient(new JobTriggerResult(true, "ok", null, null))
         {
             ActivationException = new PolicyApiException("Revision not approved", HttpStatusCode.BadRequest, "ERR_POL_002")
         };