Adds complete batch review, edit-invalidates-approval semantics, single-use commit credentials, restart-safe pending state, crash recovery without automatic retries, a DSH Web Inbox, and a prebuilt installation tarball. All 35 tests pass. See CHANGELOG.md and SECURITY.md for the full safety model.