v5.33.0

Security review model + build/review coverage gates in pm-stripe - security_review frontmatter field routes secure-code-guardian/security-reviewer via 8 domain-neutral vulnerability areas (not feature types); explicit always-vs-conditional build/review skill split with a non-blocking coverage check before 5_In_Review; full runbook rewrite of playbook + phase docs (step-by-step when/gather/command/get/done format)