Fix reviewed ops execution in fresh contexts

[areshand]

Summary

• make fresh reviewed-ops continuations verify the exact immutable request and digest-bound runbook before execution
• explain the framework-enforced reviewer, permit, and prod-mcp boundary without provider-specific logic
• stop repeated review cycles when an accepted unchanged request is not executed
• align the orchestrator, ops role, and reviewed-cycle documentation

Test

• cargo test reviewed_ops_cycle_instructions_are_provider_neutral_and_exact

E2E finding

The production GitHub E2E reached an accepted reviewed request, but five fresh ops contexts refused the prior blind-execution instruction. This change preserves fresh contexts and OS role isolation while making trusted evidence inspectable and direct provider access forbidden.