Fail closed on incomplete review context

[dymoo]

Outcome

• fails instead of emitting reviewed=true when a non-ignored file is binary, has no textual hunk, or exceeds the file cap
• fails when rendering truncates a hunk above the 30k-token request budget
• fails when the 120k-token aggregate budget drops any rendered block
• preserves intentional ignore behavior, including ignored binary paths
• keeps ignored-only paths visible in the sticky audit summary

Why

A required review gate cannot report success after silently omitting changed material. Consumers can now treat reviewed=true as complete coverage evidence for every non-ignored textual change.

Validation

• npm run format
• npm run check-all — 96/96 tests
• real-entrypoint tests prove both token failure modes exit nonzero, make zero model calls, and emit no outputs
• independent adversarial review: no blockers