Unapproved jobs have no expired/non-determining state; the only way off is cancel, which marks the entire workflow canceled even when build/test jobs already succeeded.

A gate to time out or be declined without driving workflow/pipeline (and Insights) status is needed, so DORA/pipeline health can reflect the jobs that actually ran.