feat: add policy reviews and optional control center #7

Implementation is merged in #6 (discovery), #8 (control center/governance/workflows), and #10 (registered-worker communication and host path/fixture repairs).

The remaining live host acceptance passed on 2026-09-09 after Claude reauthentication, using the CLI from main commit 118b2b6:

1. An actual Claude session read CLI status and existing product decisions, saved the explicitly declined local UI preference, and wrote a shared handoff record.
2. An actual Codex workspace-write session resumed the same generated project, read Claude's record, preserved the accepted decision and saved local preference, and appended its handoff record.
3. After a local commit and clean local clone, a fresh actual Claude session recovered both shared records, verified the clone had no inherited personal UI preference, saved the explicitly requested choice, and resumed the document.

All three processes exited 0 (62.3 s, 53.5 s, 54.4 s). Independent CLI reads, exact document-content assertions and Git diff confirmed the results. The original fixture was clean after committing; the clone changed only the requested document line, plus ignored local preference. Existing decisions and all prior markers survived. No product-code change was needed after reauthentication.

This verifies actual host alternation and clean-clone continuation using the repo-local skills/CLI. It does not claim acceptance of every external connector or every host/OS combination. Local transcripts and assertions remain in the ignored evaluation evidence directory; raw account/environment logs were not published.

All implementation PRs are merged and this acceptance item is complete. No public release, plugin installation or repository protection change was performed. PR #4 remains separate and untouched.