feat: add pagination metadata to gitea_list_prs (#340)

Return wrapped {prs, pagination} from gitea_list_prs with has_more,
inventory_complete, and page traversal via api_fetch_page. Route
gitea_review_pr inventory through gitea_list_prs so trust gates can
prove pagination finality. Add assess_list_prs_pagination_proof verifier.

Closes #340

tests/test_capability_stop_terminal.py

@@ -99,12 +99,16 @@ class TestCapabilityStopTerminal(unittest.TestCase):
         self.assertIn("Cannot perform reviewer task", str(ctx.exception))
         self.assertIn("review_pr", str(ctx.exception))
 
-    @patch("mcp_server.api_get_all", return_value=[])
+    @patch("mcp_server.api_fetch_page")
     @patch("mcp_server.api_request", return_value={"login": "jcwalker3"})
     @patch("mcp_server.get_auth_header", return_value="token author-pass")
     def test_list_prs_allowed_after_author_task_clears_stale_denial(
-        self, _auth, _api, _get_all,
+        self, _auth, _api, mock_fetch,
     ):
+        mock_fetch.return_value = ([], {
+            "page": 1, "per_page": 50, "returned_count": 0,
+            "has_more": False, "next_page": None, "is_final_page": True,
+        })
         with patch.dict(os.environ, self._env()):
             denied = mcp_server.gitea_resolve_task_capability(
                 task="review_pr", remote="prgs"
@@ -120,7 +124,7 @@ class TestCapabilityStopTerminal(unittest.TestCase):
             self.assertFalse(capability_stop_terminal.is_active())
 
             prs = mcp_server.gitea_list_prs(remote="prgs")
-        self.assertEqual(prs, [])
+        self.assertEqual(prs["prs"], [])
 
     @patch("mcp_server.api_request", return_value={"login": "jcwalker3"})
     @patch("mcp_server.get_auth_header", return_value="token author-pass")