Make Risk Manager sign off of process changes optional

Having risk manager sign off on process changes and having it be automatically the first approval that occurs does not allow for flexibility of workflows and roles within an organization.

Ideally, the risk module configuration would have a toggle to enable/disable risk manager sign off on process changes.

A secondary request would be to allow the order of where the risk manager falls in the sequential approval to be editable.