Batch review pushes and gate the first request

Folds the push-count lessons into the review, verify and monorepo docs: one push per review round, an approval-reset budget, master-merge timing, a pre-review gate (Duo, adversarial review, failure-injection specs, caller grep, size gate), the migration version check, and undercoverage in every rig proof. No version bump: wording only.