Add reviewer mode and harden scenario CI

[comwanga]

What changed

• adds the typed policy comparison tool
• adds interrupted-run recovery and deterministic reviewer reset behavior
• expands unit, security, cleanup, redaction, report, and export coverage
• runs the complete Bitcoin Core 28.1 live suite twice against independent disposable datadirs
• adds explicit frontend type-check, ESLint, production-build, Compose, and release-readiness gates

Why

Phases 8 and 9 complete the learner and reviewer surfaces. Phase 10 makes their safety, cleanup, evidence, and pinned live-node requirements blocking and visible in the existing CI workflow.

Validation

• 319 passed in the non-live backend suite
• 86 passed in the focused security/cleanup/redaction/export gate
• npm run typecheck
• npm run lint (three pre-existing non-blocking warnings)
• npm run build
• docker compose config --quiet

The pull request CI is expected to provide the required two clean-datadir Bitcoin Core 28.1 executions that were unavailable on the local workstation.