Clearer delay reasons

Instead of a generic delay status, the board now names the cause: a missing permission, an approval that timed out, or an upstream service that stopped responding.

Where a fix is safe to automate, such as re-requesting an expired token, the run card offers it as a single action.