CHW-4910 HardenQuorumNotMet

Client Input

quorum not met; collect additional approvals before emitting the hardening bundle

Default message: quorum not met; collect additional approvals before emitting the hardening bundle
HTTP status: 409 (client)

Problem. A bundle emission (POST /api/hardening/bundle, or the wizard’s Emit action) was triggered before the proposal’s approver count reached its quorum. Cause. The hardening bundle locks down K8s admission, firewall egress, MDM rollout, and CI gating in one step; the spec requires N distinct admins to sign off before emission. Fix. Collect additional approvals — each distinct admin signs at /admin/hardening/approve/<nonce> (POST /api/hardening/approval/<nonce>/sign) from their own authenticated session — until the proposal status reads “approved, ready to emit”, then re-emit. HTTP 409.