feat: bind full-review Request changes to the mutation broker

[Wibias]

Summary

• Full-review verdicts keep the [GD] Verdict comment as the format-valid published verdict.
• When Request changes is allowed, the mutation broker submits GitHub Request changes and can dismiss our pending review on a later pass.
• GitHub Approve remains off unless the user explicitly asks.
• Native-review mutation inputs now fail closed on malformed types, dismissal ownership is bound to the authenticated viewer, and dismissed reviews no longer suppress a fresh Request changes review.

Validation

Exact reviewed head: 6cad7f42de1f8df16d3464fd981c26a8775d685e

• Rebased onto current main f6cbeb43073c97abd4f1782a12dd36339777cf73; exactly 1 commit ahead / 0 behind.
• Focused RED reproduced the three reviewed defects before the production fixes.
• Native review regression build(dist): produce deterministic versioned skill bundles #14 — success.
• CI #2098 — success, including canonical repository checks, Node 26 compatibility, Node 22 compatibility, and Windows authority build/self-test/XAML/publish smoke.
• Windows rewrite baseline chore(deps): bump actions/attest from 4.1.0 to 4.2.1 #20 — success.
• Dependency Review #1703 — success.
• CodeQL #2048 — success for JavaScript/TypeScript and C#.
• Final adversarial re-review found no remaining merge-blocking correctness, security, authority, idempotency, or conflict issue; no open review threads remain.

[coderabbitai]

Important

• 🔍 Trigger review

This repository does not receive automatic reviews because it has fewer than 10 stars.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 06882fb7-6e3b-4f25-8b08-033122b12ce3

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}