Toolkit 0.10.0: local review provider, diagnostics and OCR controls

[xeonvs]

Scope

Tracks #181 and #182. The approved plan is in PLANS.md. This planning Draft is not implementation-ready: shared reporting/local provider, standalone local/debug flows, reasoning controls, safe toolkit-owned progress, OCR qualification, documentation and acceptance gates remain in progress.

Boundaries

• No GitLab dependency for explicit local review; immutable commit/range only; mandatory verified evidence MCP and optional operator-configured external MCP.
• Debug executes normal checks and records actual decisions. Raw rejected data stays in private files, not automatic console output.
• Progress never streams OCR stderr or changes DLP/summary/approval authority.
• Reasoning is protocol-aware; unset adds nothing and none is an explicit value. Real-provider support is a separate external qualification gate; HTTP 200 alone does not prove application.
• Delivery stops at a green Draft. No merge, release, package publication or issue closure. No real LLM calls in implementation qualification.

Completion

• Shared reporting and local provider with GitLab parity.
• Local/debug end-to-end and actual decision diagnostics.
• Reasoning wire matrix and progress invariance.
• Checksum-verified OCR qualification and local update.
• Documentation, self-review, local quality/security/package gates.
• Exact-head hosted checks and external GitLab/local/debug handoff.

[xeonvs]

Superseded, with the owner's approval, by #184 on codex/v0.10.0-local-review. The replacement Draft contains the implementation, considered boundaries, completed evidence and remaining qualification gates. Commit history is preserved; no merge, release or tracked issue closure is implied.