As an alternate to labeling, would the following work?
- at the completion of a workflow (an approval workflow for instance), trigger a rule to run.
- the rule would copy that document version to an "Approved" folder, and rename the file with a version specific suffix to identify it.
- this folder could be set up as read-only to everyone (except the manager) so that no changes could be made to those versions.