Add clone-based code review workflow

[kcosr]

Summary

• add the git-clone prepare hook and bundled code-review-clone assignment
• harden clone inputs against option injection and credential-bearing HTTPS URLs
• make managed clone checkouts reconfigurable/reusable and clean them up on delete
• preserve Attempts drawer follow-up/resume selection while timeline history is lazy-loaded
• switch resumed runs immediately to the Response view with a hidden live placeholder until the real timeline attempt arrives
• refresh same-run live timeline history without resubscribing the SSE stream on attempt-count changes

Tests

• npm run check
• npm run test:web
• node --test test/git-clone-hook.test.mjs
• node --test test/reconfigure.test.mjs
• node --test test/command-services.test.mjs

Review

• Nested task-runner review run nw4g5n approved the original clone workflow delta for ship.
• Post-review web follow-up committed in 02659ab after local npm run check passed.