feat: add blind R7 rating workspace

[yava-code]

What changed

• adds a hash-verified, resumable workspace for the frozen R7 expert packets
• keeps causal ratings human while automating packet integrity, coverage, schema validation, and export
• adds blinded adjudication that prefills only exact categorical consensus and leaves disagreements pending
• rejects tampered packets, incomplete bundles, reused identities, and unexpected material in the blind directory
• updates the R7 runbook and repository handoff

Verification

• TypeScript check passed
• 114 runnable extension tests passed; 2 Docker-only tests skipped locally on Windows
• real 18-packet smoke: init, status, next, answer, and incomplete-export rejection
• production build and VSIX packaging passed

Claim boundary

This makes the human gate executable but does not fabricate or replace either expert rating. Full R7 remains pending until two experienced TypeScript raters and a blinded adjudicator return real bundles.

[gemini-code-assist]

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: b7cdff44-40f6-4b90-acb0-a0d3ae5f86f9

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}