v1.91.45.0 feat: configurable model tiers and advisory freshness (#3073)

* feat: add configurable model tiers and advisory freshness

* fix: disclose role selections before Claude review execution

* fix: reject malformed model policies and keep model pins portable

* fix: separate readiness diagnostics and bound version checks

* fix: preserve actionable model failures and validate review inputs before probes

* fix: retry released probe locks and retain late-rejection repair context

* feat: finalize configurable model tiers and verified release repairs

* fix: preserve strict model policy reads on Windows

* fix: keep fixture probes read-only and clarify pending CEO decisions

* fix: verify native terminal closure before bounded descriptor settlement

claude-code/SKILL.md.tmpl

@@ -53,6 +53,9 @@ Set `GSTACK_CLAUDE_MODEL=<model>` for an explicit override, including resumed
 consultations. If the user names a model, pass that value through this environment
 variable for every runner call. Without an override, retain Claude's configured
 model; harness routing never chooses a model family.
+Only for an explicit `--role plan-review` (e.g. `/claude-code challenge --role plan-review`),
+append `--role plan-review` to every runner call; the runner prints `CLAUDE_MODEL:` and
+passes that one policy model (none in host mode). [Policy setup](https://github.com/garrytan/gstack/blob/main/docs/model-policy.md).
 
 Do not infer authentication state from credential files or environment variables.
 Run the actual runner invocation in the host's normal execution context. On a