Simplify pre-implementation review to plan alignment

[areshand]

Summary

• replace the authority/plan-verdict gate with one binary plan-alignment review
• compare the authenticated original request directly with the complete sealed iteration plan
• route correctable misalignment back to orchestrator replanning and ask the user only when required input is genuinely absent
• remove decision-capsule and decision-drift lifecycle logic while retaining digest binding against input substitution
• update architecture, lifecycle guidance, migration checks, and mocked workflow coverage

Architecture

The supervisor still owns workflow transitions, immutable digest binding, and reviewer isolation. The reviewer owns only the semantic aligned/misaligned judgment. The binding is explicitly not a formal contract or a separate authority decision. Production operations, credentials, IAM, runbooks, and provider configuration are unchanged.

Validation

• cargo test — 94 passed
• python3 -m unittest tests.test_swe_outcomes tests.test_migration_contracts — 42 passed
• bash tests/lifecycle.sh — passed
• shell syntax checks for lifecycle, mock E2E, malicious-orchestrator, and aggregate test scripts — passed
• bash tests/malicious-orchestrator.sh — correctly skipped because the boundary harness requires Linux root
• git diff --check — passed

tests/mock_orchestration_e2e.sh was updated but its full local run was not completed because the existing macOS/PTY runner stalled while processing its first fixture heredoc; CI can exercise the Linux path.