feat(orchestrator): W1 operator tasks, diff previews and bound commit asks

Operator tasks move from the Inbox into Tasks with the Waits on Operator filter. Review and commit asks carry the staged diff; a file whose old or new blob holds an armour line or a detection-pattern match, or every file when no pattern loads, ships only its path, status, mode and counts. The approval binds to the staged tree id from git write-tree, the encoded request body respects the hub limit, and the hub image ships every client module signed.py loads. Committed below the bar on the operator's word 2026-11-12 (no further per-bundle tests, one gate after the merge): the full hub suite and the W1 e2e never ran, two high MEDUSA rows (sandbox_paths.py FLOOR, permission_hook.py ask POST) wait for their acceptance.

🎯 Fix: 85 %
💥 Break: 12 %
💸 Cost: 30 %
⏱️ Time: 30 %
🛡️ Security: 50 %
🏆 Score: 100
🚦 Gate: ⛔ fix 85 % < 90, break 12 % > 5; security 50 % < 100: ask the operator before the commit

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

tests/test_hub_console.py

@@ -57,7 +57,7 @@ class TestHubConsole(HubCase):
         kept = self.item("operator/greet")
         self.assertEqual((kept["kind"], kept["title"], kept["command"], kept["directory"], kept["runnable"], kept["deniable"]), ("operator", COMMAND, COMMAND, str(self.outside), False, False))
         self.assertEqual(kept["job"]["output"], "line 1\nline 2\n")
-        self.assertEqual(self.snapshot()["badges"]["inbox"], 1)
+        self.assertEqual(self.snapshot()["badges"]["tasks"], 1)
         for payload in ({"id": "nope"}, {"id": job["id"], "extra": 1}, {}, [job["id"]]):
             with self.subTest(payload=payload):
                 self.assertEqual(self.dismiss(payload, self.guard(self.host)), 400)