How would you design an AI governance workflow for a healthcare SaaS product at Qualified Health, including approvals, auditability, and monitoring?