feat(orchestrator): W1 operator tasks, diff previews and bound commit asks

Operator tasks move from the Inbox into Tasks with the Waits on Operator filter. Review and commit asks carry the staged diff; a file whose old or new blob holds an armour line or a detection-pattern match, or every file when no pattern loads, ships only its path, status, mode and counts. The approval binds to the staged tree id from git write-tree, the encoded request body respects the hub limit, and the hub image ships every client module signed.py loads. Committed below the bar on the operator's word 2026-11-12 (no further per-bundle tests, one gate after the merge): the full hub suite and the W1 e2e never ran, two high MEDUSA rows (sandbox_paths.py FLOOR, permission_hook.py ask POST) wait for their acceptance.

🎯 Fix: 85 %
💥 Break: 12 %
💸 Cost: 30 %
⏱️ Time: 30 %
🛡️ Security: 50 %
🏆 Score: 100
🚦 Gate: ⛔ fix 85 % < 90, break 12 % > 5; security 50 % < 100: ask the operator before the commit

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

orchestrator/client/hub_limits.py

@@ -0,0 +1,20 @@
+"""Returns:
+    DIFF_LIMIT: bytes of JSON-encoded patch text one review diff carries, in
+        the client that builds it and the hub that takes it.
+    DIFF_BODY_LIMIT: bytes of request body the hub reads for an ask or a
+        review request; the client sends a larger one without its diff.
+    FILE_CAP: files one review diff lists; the client builds no diff of more.
+    PATH_LIMIT: characters of a path the hub takes, a diff path included;
+        the client builds no diff with a longer one.
+    NOTES_LIMIT: characters of review notes the hub takes; the client refuses
+        longer notes instead of cutting them.
+    WITHHELD: the note of a diff entry that ships without its patch because
+        its content may hold a secret.
+"""
+
+DIFF_LIMIT = 2 << 20
+DIFF_BODY_LIMIT = 4 << 20
+FILE_CAP = 5000
+PATH_LIMIT = 4096
+NOTES_LIMIT = 100_000
+WITHHELD = "content withheld"