Function handle_sop_pending 

pub async fn handle_sop_pending(
    __arg0: State<AppState>,
    __arg1: ConnectInfo<SocketAddr>,
    headers: HeaderMap,
) -> Result<impl IntoResponse, (StatusCode, Json<Value>)>

GET /admin/sop/pending - list the runs parked on a human: WaitingApproval gates AND deterministic PausedCheckpoint runs (both are resolved by the same approve/deny chokepoint), distinguished by the kind field.