ai-gov: approval-required network access

[craig-osterhout]

Description

Document approval-required network access. An organization network policy can
require a developer to confirm each destination before a sandbox reaches it.

Split from #26051. The HTTP method and path rules are in #26060, which is
branched off this PR and merges after it.

Page	What changed
network.md	What approval is, what satisfies it, how overlapping policies behave, and the sbx policy approval workflow
organization.md	The Require approval before access setting, and that resetting local policy clears recorded approvals
concepts.md	Approval as a policy-level setting and a third evaluation outcome
local.md	Troubleshooting entry for a request blocked pending approval
monitoring.md	Filter for rules recorded from an approval

Related issues or tickets

ENGDOCS-3373

Reviews

• Technical review
• Editorial review
• Product review

[netlify]

✅ Deploy Preview for docsdocker ready!

Name	Link
🔨 Latest commit	3ca91a1
🔍 Latest deploy log	https://app.netlify.com/projects/docsdocker/deploys/6aa2f3671adbcc00084e7c23
😎 Deploy Preview	https://deploy-preview-26059--docsdocker.netlify.app
📱 Preview on mobile	Toggle QR Code... Use your smartphone camera to open QR code link.

---

To edit notification comments on pull requests, go to your Netlify project configuration.