feat(service-catalog): require provider approval to enable compute

Set enablementPolicy.mode to GatedByProvider on the compute Service
manifest so that new service enablements enter PendingApproval and
require an explicit provider approval (spec.approval.decision: Approved)
before becoming active, rather than self-activating immediately.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: scotwells

config/components/service-catalog/service.yaml

@@ -9,5 +9,7 @@ spec:
   owner:
     producerProjectRef:
       name: datum-cloud
+  enablementPolicy:
+    mode: GatedByProvider
   phase: Published
   serviceName: compute.datumapis.com