Approvals for ACP-based executors (#1511)

* Approvals for ACP-based executors

Gemini, Qwen, and Opencode

* set all permissions to "ask"

* use `normalize_unified_diff` in other log normalizers

crates/executors/default_profiles.json

@@ -46,6 +46,11 @@
           "model": "gemini-3-pro-preview",
           "yolo": true
         }
+      },
+      "APPROVALS": {
+        "GEMINI": {
+          "yolo": false
+        }
       }
     },
     "CODEX": {
@@ -78,11 +83,19 @@
     },
     "OPENCODE": {
       "DEFAULT": {
-        "OPENCODE": {}
+        "OPENCODE": {
+          "auto_approve": true
+        }
       },
       "PLAN": {
         "OPENCODE": {
-          "mode": "plan"
+          "mode": "plan",
+          "auto_approve": true
+        }
+      },
+      "APPROVALS": {
+        "OPENCODE": {
+          "auto_approve": false
         }
       }
     },
@@ -91,6 +104,11 @@
         "QWEN_CODE": {
           "yolo": true
         }
+      },
+      "APPROVALS": {
+        "QWEN_CODE": {
+          "yolo": false
+        }
       }
     },
     "CURSOR_AGENT": {