feat: harden local CLI worker

[EmersonBraun]

Summary

• Extends the shared runLocalCli boundary with abort cancellation, process-group termination, timeout/output ceilings, and parent-signal cleanup.
• Makes isolated execution use temporary HOME/TMPDIR, a minimal environment, and only explicitly selected credentials; trusted-local remains explicit.
• Redacts provider credentials and known token formats from bounded diagnostics.
• Propagates cancellation and worker policy into Codex and Claude adapters without changing the AdapterFactory contract.
• Adds versioned worker limits to .agentskit-review.json and offline coverage for isolation, inheritance, abort, overflow, redaction, limits, and missing executables.

Validation

• npm run check
• npm pack --dry-run
• 45/45 tests passing

Scope

Reuses the existing process boundary; no provider-specific subprocess implementation was added.

Closes #40