The out of the box "Add Watermark" step appears to write directly on the original asset. Provided the asset is not edited during the approval process, you could create a version that gets watermarked then restore the clean version after it's approved.