P5: Confirmation flow for destructive/billable actions

Imported from GitHub issue El-SaMa/oma#68 by @El-SaMa.

Human-in-the-loop approval before risky actions execute.