feat(review): the review is a gate - verdict in the file, CC engine, project memory

Ordre 5 (wave 1, P11 + P5), review_version 1.1.

- K7: `verdict: ALLOW | WARN | BLOCK` is required in review.md (strict
  error, soft warning for 1.0 reviews). New CLI lib/review/verdict-gate.mjs:
  0 = ALLOW/WARN, 1 = BLOCK, 2 = could not decide (never green); a verdict
  greener than the file's own BLOCKERs or JSON block is exit 2. Realpath
  main guard (the old file:// guard exits 0 under a symlink - measured).
- No finding is struck for length: succinctness trims only MINOR/SUGGESTION
  text (catalogue tier), keeps BLOCKER/MAJOR whole, counts trims; the
  coordinator lists what it declined to judge.
- Claude Code's /code-review and /security-review run as the engine via the
  Skill tool (never --fix/--comment/--post/ultra); lib/review/engine-findings.mjs
  turns their findings into a reviewer payload; two catalogue keys
  (CODE_REVIEW_DEFECT, SECURITY_REVIEW_VULNERABILITY), catalogue 12 -> 14.
  An engine that did not run forbids ALLOW.
- Every BLOCKER is written as a numbered `### Step R<n>` with its source
  finding (strict error REVIEW_MISSING_REMEDIATION_STEP).
- P5: lib/review/recurrence.mjs - a finding class in two review.md files
  (current + git history, no new store) becomes one proposal, routed by the
  catalogue's memory_route; written only between Voyage markers in
  .claude/rules/voyage-review-lessons.md under a size budget, CLAUDE.md gets
  a pointer only; the operator approves every line (Phase 8.7).
- Workflow substrate: catalogue enum in step; a missing reviewer or engine
  forbids ALLOW there too (it returned ALLOW on zero findings before).
- Fixtures review-run-A/B said WARN over a BLOCKER; now BLOCK.

Borrowed and credited in code: Superpowers (declined-to-judge), ai-native-sdlc
(cap only nits; mistake/fix/check), Spec Kit (managed block; converge steps),
Pocock (retro routing), Kiro (verdict file + gate; evidence per lesson),
Cherny (engine -> brief control order; review -> memory; budget).

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/lib/fidelity-diff.test.mjs

@@ -25,7 +25,7 @@ const RUN_B = fixture('review-run-B.md');
 
 test('parseReviewArtifact — extracts verdict + finding IDs from frontmatter', () => {
   const a = parseReviewArtifact(RUN_A);
-  assert.equal(a.verdict, 'WARN');
+  assert.equal(a.verdict, 'BLOCK', 'one BLOCKER → BLOCK (the fixture said WARN until ordre 5; the threshold table never allowed that)');
   assert.ok(Array.isArray(a.findingIds));
   assert.equal(a.findingIds.length, 5);
   for (const id of a.findingIds) assert.match(id, /^[0-9a-f]{40}$/);
@@ -71,7 +71,8 @@ test('fidelityDiff — A vs B (A ⊂ B): same verdict, jaccard 5/6, equivalent a
 
 test('fidelityDiff — divergent verdict makes it non-equivalent even at jaccard 1.0', () => {
   const a = parseReviewArtifact(RUN_A);
-  const flipped = RUN_A.replace('verdict: WARN', 'verdict: BLOCK');
+  const flipped = RUN_A.replace('verdict: BLOCK', 'verdict: WARN');
+  assert.notEqual(flipped, RUN_A, 'fixture control: the verdict line was flipped');
   const d = fidelityDiff(RUN_A, flipped);
   assert.equal(d.verdictMatch, false);
   assert.equal(d.jaccard, 1);