Two-identity Gitea review gate (claude-reviewer bot), tightened branch
protection with dismiss_stale_approvals, SHA-based re-review on push,
and pre-tag deploy audit hook. Fixes the self-approval block that forced
pr-reviewer into COMMENT verdicts.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>