Add non-terminal review draft save/resume tools so a fully validated
reviewer verdict can survive MCP disconnect or stale-runtime restart
without counting as a formal review.
- gitea_save_review_draft: durable draft with PR, head SHA, target SHA,
worktree, validation evidence, intended verdict, and blocker reason
- gitea_resume_review_draft: live revalidation of head/target/#332/lease/
identity/worktree before mark-ready or optional submit
- Drafts never substitute for formal approval without revalidation
Closes#609
Share review-workflow-load and review-decision-lock state across MCP
daemon process pools via a user-private durable store keyed by profile
identity (not host-global /tmp), with TTL and fail-closed profile checks.
sysadmin