#38 FTX-38: Delete unauthenticated one_click_approve/reject routes

Remove GET /v1/tasks/{id}/one_click_approve|reject (main.py:643-664) - no auth, no token, no tenant scope; anyone can approve any task. Token-gated /a/click/{token} flow remains. Tests: routes gone. Phase 1 (do first).