feat: deliverable review gate, app lifecycle fixes, CI/CD pipeline

- Add deliverable review gate: pause workflow when agents produce important
  documents (PRDs, design docs, etc.) for human review before continuing
- Add company-level reviewDeliverables setting with onboarding card selector
- Block agent heartbeats when deliverable review is pending (agent + CEO)
- Trigger review at document creation time in API server for reliability
- Fix autoApproveHires vs reviewDeliverables conflict in approval-policy
- Fix app quit: force-exit on all platforms (macOS Dock, Windows tray, Linux)
- Add multi-platform CI/CD pipeline (macOS arm64/x64, Windows x64/arm64,
  Linux x64/arm64 with deb/AppImage/rpm/snap) with code signing support

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

src/main/app-lifecycle-service.ts

@@ -10,7 +10,7 @@ interface AppLifecycleDependencies {
 export function createAppLifecycleService({
   getMainWindow,
   ensureWindow,
-  shouldQuit: _shouldQuit,
+  shouldQuit,
   onBeforeQuit,
 }: AppLifecycleDependencies) {
   function register(hasSingleInstanceLock: boolean) {
@@ -44,9 +44,9 @@ export function createAppLifecycleService({
     });
 
     app.on("window-all-closed", () => {
-      // On macOS, keep the app running when all windows are closed (standard behavior).
-      // On Windows and Linux, quit the app.
-      if (process.platform !== "darwin") {
+      // On macOS, keep the app running when all windows are closed (standard behavior)
+      // UNLESS the user explicitly chose Quit (before-quit already fired).
+      if (process.platform !== "darwin" || shouldQuit()) {
         app.quit();
       }
     });