docs(reviewer): update audit status + add finding-orchestration plan

Session 1 (2026-05-31) resolved 26 findings across Sonnet/Haiku/Opus; 298/298
CGAL tests green.  Bring the audit docs in line with reality:

- README.md: G0 banner now records that the original authors were contacted by
  email about porting/relicensing rights (awaiting reply); headline-status cells
  updated per finding; new "Session 1 — implemented" record; link to the plan.
- Per-audit resolution banners (api-performance, numerical-stability,
  input-validation, test-coverage, math-citation, thread-safety) + G0-blocked
  banners (cgal-submission, dependency-license).
- NEW finding-orchestration.md: the meta-plan mapping every finding to a session,
  an implementing model (Haiku/Sonnet/Opus by the "how much must be understood"
  rule), and an Opus review gate after each implementation session.  Records S1
  (done) and lays out S2–S6 so the next session can be picked up cold.

Docs only — no code change.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

doc/reviewer/dependency-license-audit-2026-05-31.md

@@ -9,6 +9,12 @@ unresolved provenance/license blocker (CGAL audit **G0/G1**)?
 
 Status legend: 🔴 Critical · 🟡 Important · 🔵 Polish
 
+> **🔄 Status (2026-05-31):** **D1/D2 blocked by G0** — the dependency/licensing
+> matrix rests on the MIT premise that G0 (porting rights) undermines. The
+> original authors have been **contacted by email**; no licensing action until
+> their reply. Scheduled **S6** (after G0/G1) in
+> [`finding-orchestration.md`](finding-orchestration.md).
+
 > **Good news up front:** a `code/deps/THIRD-PARTY-LICENSES.md` already exists and is
 > a genuinely good per-dependency compatibility matrix (CGAL, Eigen, libigl, GLFW,
 > nlohmann/json). This audit does **not** redo that work. It flags two things that