chore: clarify authorized admin merge handoff

[steve8708]

Summary

• clarify that REVIEW_REQUIRED is not a user handoff under /ship
• require the owning task to perform the guarded admin merge after the unchanged soak

Checks

• corepack pnpm guard:workspace-skills
• git diff --check

This change updates shipping guidance only; deployment is not part of this PR.

[builder-io-integration]

Builder reviewed your changes and has a few items to flag 🟡

Review Details

Code Review Summary

This low-risk, docs-only PR clarifies that /ship owns the authorized admin-merge handoff after the unchanged soak, rather than treating REVIEW_REQUIRED as a request for the user to click Merge. The overall direction is consistent with the existing shipping lifecycle and correctly reinforces that the owning task must complete the guarded merge.

One wording concern remains: the new review gate lists a “verified fix, reply, or terminal disposition,” which can be read as allowing an arbitrary reply to satisfy the gate even when the underlying review item is unresolved. That is weaker than the existing merge-gate language and should require an addressed/verified outcome plus any required reply, or a valid terminal disposition. This was found by one of two reviewers and is medium severity; because this is low-risk documentation, server-side filtering may omit it from inline comments.

🧪 Browser testing: Skipped — PR only modifies shipping guidance, with no UI or runtime impact.