Approval service rejections can be bypassed by retrying denied workflow runs

[fheinecke]

GHA workflows denied by the approval service can be retried, and will eventually succeed, bypassing the service entirely.

Example workflow run: https://github.com/gravitational/teleport.e/actions/runs/18791263690