Game config approvals

Any change to RTP / paytable / volatility / max_multiplier requires 2-person approval. Configs are versioned in Git, signed before runtime load. Diffs and signers are recorded here.