fix: allow unrestricted review agents

[cgaravitoq]

Summary

• allow every configured agent to use bash, task, edit, write, patch, and webfetch without local deny rules
• convert review guardrails from publish/swarm blocking to swarm observability only
• keep review-state loop tracking while making swarm cap advisory instead of blocking

Verify

• bun test
• git diff --check
• opencode run --agent reviewer permission diagnostic
• opencode run --agent architect subagent permission diagnostic for exec, fixer, reviewer-quick, reviewer-reasoning, reviewer-arch, reviewer-e2e
• opencode run --agent architect direct permission diagnostic
• opencode run --agent coder direct permission diagnostic