Council: scored review and fix loops

Added

• Council brings independent reviewers to an agent team, scores each review out of 10, and asks the lead to fix findings and convene fresh rounds until the target or round limit is reached.
• A compact composer strip shows the current round, lowest score, target, and expandable reviewer results, including first and final scores. Open a reviewer directly from its row.
• Council settings control the target, round limit, reviewer count, and whether new threads start with Council on. When the team needs a decision, choose Keep fixing, Lower target, or Accept and finish; raise the round limit when more preset rounds are available.

Fixed

• Changes after a review make its scores stale, so earlier passing scores cannot finish newly changed work without review.
• Canceling Council setup clears its pending state so setup can be retried. Actions with no lower target or higher round preset are hidden, avoiding empty pickers.

Known limitations

• Live review and fix loops using paid models have not been validated for this release.
• Full cross-platform installer validation on real hardware has not been completed.
• Council cannot detect edits made outside PandaCode, or shell/script edits that are not reported through file tracking.

Installing

• macOS (Apple silicon): open PandaCode-macOS-arm64.dmg and drag PandaCode to Applications. This build is signed and notarized, so macOS opens it without a warning.
• macOS (Intel): the same, with PandaCode-macOS-x64.dmg.
• Windows x64: run PandaCode-Windows-x64-setup.exe. If SmartScreen warns about an unknown publisher, choose More info > Run anyway.
• Windows arm64: run PandaCode-Windows-arm64-setup.exe (same SmartScreen step).
• Linux x64: chmod +x PandaCode-Linux-x86_64.AppImage and run it.
• Linux arm64: chmod +x PandaCode-Linux-aarch64.AppImage and run it.
• Any of the above, from a terminal: npx pandacode downloads, verifies and installs the right build, and signs it locally on macOS, so no Gatekeeper warning appears.

Each file has a .sha256 checksum beside it. Installed copies update themselves from this page. Build from source: see CONTRIBUTING.md.