bxctl: deny, another name for refuse

Implemented-By: OpenCode session (model recorded in docs/implementer-log.md)

crates/bxctl/src/cli.rs

@@ -21,6 +21,9 @@ usage: bxctl <command> [options]
   bxctl refuse <id> [--reason TEXT] [--admin-socket PATH]
       Refuse approval <id>, recording a reason.
 
+  bxctl deny <id> [--reason TEXT] [--admin-socket PATH]
+      Another name for refuse.
+
   bxctl grants check [--admin-socket PATH]
       Check that the grants load.
 
@@ -98,7 +101,7 @@ pub fn parse(args: &[String], home: &Path) -> Result<Command, UsageError> {
         "chat" => parse_chat(rest, home),
         "approvals" => parse_approvals(rest, home),
         "approve" => parse_approve(rest, home),
-        "refuse" => parse_refuse(rest, home),
+        "refuse" | "deny" => parse_refuse(rest, home),
         "grants" => parse_grants(rest, home),
         "audit" => parse_audit(rest, home),
         // A flag before the command, or any unknown command, is not valid.