Stop bumping homebrew on release - #13479

- Count probe now ships a canonical -F-variables gh api graphql command;
  past incident: agent wrote \" inside PowerShell single quotes, GraphQL
  silently rejected the payload inside a catch {}, monitor assumed 0
  comments for a full session. Probe failure no longer silently means
  "0 comments" — falls through to full REST fetch and surfaces in the
  polling summary.
- Phase 7 thread-resolve was broken end-to-end: the single-comment REST
  path 404s (right path is pulls/comments/{id}, no PR number), and
  PullRequestReviewComment has no pullRequestReviewThread field in the
  current GitHub GraphQL schema. Replaced with reviewThreads + client-
  side databaseId filter; verified against cli/cli#13479 in bash and
  PowerShell.
- Poll loop now explicitly forbids improvised "CI fixed, stop here?" /
  "waiting on reviewer, exit?" prompts. Tick-step-8 stop conditions
  and SIGINT are the only authorized exits.

Co-Authored-By: Claude <noreply@anthropic.com>

…NTATION_UPDATE mapper (ATLAS-66) (#114)

Add documentation as a third evidence source, paralleling reviews (ATLAS-65):

atlas.github (transport + docs normaliser):
- fetch_pr_files(owner, repo, pr_number) on the GitHubClient Protocol and
  GitHubRESTClient, calling _get(.../pulls/{n}/files, result_key=None) — same
  bare-array path as fetch_pr_reviews, inheriting per_page/304/Link behaviour.
- NormalisedDocs (frozen webhook-swap shape) + normalise_pr_files(files, *,
  head_sha): filters to docs/ paths; None when none touched (absence is the
  signal); else one PASSED record with sorted docs_paths and the synthesised
  pin (docs:<head_sha>, head_sha, payload_hash of the docs subset only).

atlas.evidence (docs mapper + ingest):
- map_docs_to_evidence: system-tier DOCUMENTATION_UPDATE, status verbatim,
  pin triple from the docs record (satisfies the ATLAS-61 guard).
- ingest_docs(docs | None): persists the one record, or [] when None.

Tests + a recorded cli/cli#13479 pr_files fixture (4 files, 2 under docs/).
Two seeded defects each fail a named test: docs/ -> doc/ and the inverted
empty check (the absence-based guarantee criterion 2 protects).

Co-authored-by: derekrivers <dyk3rz@gmail.com>
Co-authored-by: Claude Opus 4.8 (1M context) <noreply@anthropic.com>