feat(cmo): review-project clones remote repos from URL or shorthand
Fixes /cmo review failing from Slack. Container-safe: the reviewer clones the remote itself (depth=50), with host allow-list and optional token injection.
Fixes /cmo review failing from Slack. Container-safe: the reviewer clones the remote itself (depth=50), with host allow-list and optional token injection.