Require evidence and bounded monitoring for Codex reviews

[backslash-f]

Summary

• Require positive repository-specific evidence before automatic Codex review becomes a merge gate.
• Separate configuration from current-head execution, bound all automatic-review monitoring, including processing, to five minutes, and deduplicate unchanged snapshots.
• Synchronize the consumer template and root contract, protect scenario outcomes with validation regressions, and prepare release 0.0.35.

Closes #43.

Validation

• Scripts/swift_format.sh format-and-lint Scripts Tests
• Scripts/validate_guidelines.swift (20 guidelines)
• Tests/run_tests.swift (36 native Swift tests)
• Markdown wrapping checker (5 files)
• git diff --check

Swift validation used a temporary compiler cache; tests used a process-only Git signing override for temporary fixture commits.