TRACKR-241 fix query for approved vacation requests

Used a custom query in the repository directly (having a NamedQuery on the entity would have been another option - but I'm fine with the Query annotation on the interface).

Also added a test for the repository.