feat: build standalone R7 blind kit

[yava-code]

What changed

• builds a deterministic offline kit from the frozen R7 packets
• prebundles the rater CLI so experts need Node 22 but no checkout, npm install, or network
• binds every allowed file and the frozen packet index into an out-of-band-verifiable kit hash
• rejects tampering, missing/extra files, symlinks, and rewritten manifests that try to admit outcome material
• makes the standalone kit the default expert handoff without changing any frozen packet byte or rating field

Verification

• TypeScript check passed
• 119 runnable extension tests passed; 2 Docker-only tests skipped locally on Windows
• two real 18-packet builds produced identical kit hash a209f22938a3c4744a1decd80ffb14bd0681b0a111aa50fdd535f88443fbf643
• bundled CLI passed verify-kit and init/status outside the repository
• production build and VSIX packaging passed

Claim boundary

The hash above is local build evidence, not a completed study artifact. Human ratings remain pending and must use a chosen kit hash communicated separately.

[gemini-code-assist]

Caution

The consumer version of Gemini Code Assist on GitHub has been sunset. All code review activity has officially ceased.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: 547d38bb-e70f-4fa6-832f-32649364a0af

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}