feat(author): harden reporting and claim capability per #183

- Add 'mark_issue' to TASK_MAP in resolve_task_capability for exact mutation proof (closes gap on unknown treated as allowed).
- Add assess_controller_handoff and integrate into build_final_report (downgrades missing handoff).
- Add tests for handoff and update existing.
- Update SKILL.md and review-pr.md to mandate exact 'Controller Handoff' section, exact sweep evidence, PR head SHA in reports.
- Author profile used throughout; no review/merge.

Refs #183

mcp_server.py

@@ -4213,7 +4213,11 @@ def gitea_resolve_task_capability(
             "role": "author",
         },
         "claim_issue": {
-            "permission": "gitea.issue.write",
+            "permission": "gitea.issue.comment",
+            "role": "author",
+        },
+        "mark_issue": {
+            "permission": "gitea.issue.comment",
             "role": "author",
         },
         "create_branch": {