Build POST /deals/{id}/review endpoint #19

[isaacsun0813]

Validates that deal is completed and only once per user

Tests enforce rules (e.g., no double review, only participants)