Track a pending allow/deny action with Button loading spinners so users cannot double-submit while the approveConsent mutation runs or while the browser waits on the OAuth callback redirect. Signed-off-by: Cursor Agent <cursoragent@cursor.com> Co-authored-by: Bryan FRIMIN <bryan@frimin.fr>