v0.10.0 - LLM batch-fix for dual-review code findings

Dual-review CODE findings can now be fixed by an LLM, not just plan findings.

• Queue them like plan findings: F queues a confirmed code finding for the batch (or unqueues/applies it), and A queues EVERY confirmed code finding on the feature at once ("fix all").
• One run fixes them all: a single headless broad-edit run resolves the whole queue in one pass (so fixes can't rot each other's anchors), capped by the new budget_code_fix_usd (default $5).
• Verified against the global context: after the fix, ritual runs ./check.sh (full), then an independent, read-only re-review of the diff confirms every finding is actually resolved and nothing regressed. A batch is accepted only if BOTH pass.
• git is the undo: a passing fix is LEFT in your working tree - review it with git diff and keep or discard it with git. Any gate failure (red check.sh or a re-review that flags an unresolved finding or a regression) git-reverts the whole batch and leaves the findings queued.
• Prefer to fix by hand? m + Q still route code findings to nvim's quickfix.

420 cargo tests + 80 token-free live checks.

Full context: ROADMAP.md and the README roadmap.