feat(cmo): projects dashboard — persist reviews + executable actions

Every /cmo review now persists to cmo_project_reviews + cmo_project_actions. Portal /projects/ shows list + detail + per-action controls (execute/mark-done/skip). One executable action kind ships in Phase 1: reference_benchmark. 10 new tests, 340/340 green.