v0.5.8

Native Review checkpoint and restricted-only resume

• Persist a digest-bound, owner-only checkpoint immediately after Native Review freezes.
• Add the official quality-review resume-restricted --session <absolute-dir> entry point without rerunning Native Review.
• Enforce at most 1 Native attempt and 2 Restricted attempts with immutable per-attempt audit artifacts.
• Add result schema v10 and company envelope v3 while preserving v8/v9 and envelope v1/v2 contracts.
• Validate exact Git objects, trusted diff, frozen findings, policy/schema contracts, locks, and publication state before resume.
• Record independent Native/Restricted duration and token metrics with safe heartbeat and failure classification.

code-quality-service requires its separate schema-v10/session-store upgrade before enabling restricted resume in company CI.