Provision isolated commissioned-session workspaces

[KeenWill]

Summary

• Add a fail-closed deployment helper that creates each commissioned session as a direct isolated Git repository at its derived session root.
• Preserve a supplied legacy tree without copying Git metadata, caches, build output, or dependencies, then publish the repository atomically.
• Reject malformed session IDs, abbreviated or unreachable revisions, indirect repositories, mismatched remotes, and unsafe existing targets.
• Cover first provisioning, idempotence, seed preservation, and every rejection class with six executable tests.

Validation

• Shell syntax and six provisioning tests
• Tooling regression suites (57 tests)
• Documentation checks except the inherited pre-merge PR 1125 citation
• Cargo formatting, check, clippy, doctests, rustdoc, and metadata

The complete workspace unit run reached existing host-isolation/socket failures and an existing non-terminating runtime test; this tooling-only slice adds no Rust execution path.

Meaningfully changed lines: 345. Numeric bounds added: none.

Stack ledger: absorbed PR 1030 at eeee1c5; PR 1028 at 4cdc5df; numeric-bounds stack through PR 1125 at 5466001.

Known ignored check: Web search live smoke (provider credits).

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.

[Copilot]

Copilot was unable to review this pull request because the user who requested the review has reached their quota limit.

[chatgpt-codex-connector]

You have reached your Codex usage limits for security reviews. Please try again later.

[coderabbitai]

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro Plus

Run ID: 651f869d-ec3b-42d3-a9f7-562c66871378

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

Warning

Your free Security trial is over. An organization admin can activate billing to continue.

---

_{Comment @coderabbitai help to get the list of available commands.}

[KeenWill]

@codex review

Head: 4e6abf6

[chatgpt-codex-connector]

You have reached your Codex usage limits for code reviews. You can see your limits in the Codex usage dashboard.