feat(omp): add write approval mode (#2228)

Expose OMP write approval mode in the provider manifest and launch configuration.

packages/protocol/src/provider-manifest.ts

@@ -151,6 +151,13 @@ export const OMP_MODES: AgentProviderModeDefinition[] = [
     colorTier: "dangerous",
     isUnattended: true,
   },
+  {
+    id: "write",
+    label: "Write Approval",
+    description: "Launches OMP with write approval mode — reads are free, writes require approval.",
+    icon: "ShieldAlert",
+    colorTier: "moderate",
+  },
   {
     id: "ask",
     label: "Always Ask",