fix: drop the accidentally committed worktree gitlink, ignore .claude/worktrees

The pin bump used `git add -A` from a checkout that had a git worktree under
.claude/worktrees/, so the previous commit recorded it as a gitlink — a
submodule pointer to a commit no clone can resolve. Removed, and .gitignore now
covers the directory so it cannot recur.

Co-Authored-By: Claude Opus 5 (1M context) <[email protected]>

.gitea/workflows/review-reusable.yml

@@ -63,7 +63,7 @@ on:
       max_steps:                 { type: string, default: "14" }   # GADFLY_MAX_STEPS
       worker_model:              { type: string, default: "" }   # GADFLY_WORKER_MODEL
       allowed_users:             { type: string, default: "" }   # GADFLY_ALLOWED_USERS (consumer-specific; set in your stub)
-      reviewer_tag:              { type: string, default: "" }   # reviewer image tag (e.g. "sha-b37cd09") — empty falls back to user var GADFLY_REVIEWER_TAG, then the pin baked into the container: line
+      reviewer_tag:              { type: string, default: "" }   # reviewer image tag (e.g. "sha-b850e35") — empty falls back to user var GADFLY_REVIEWER_TAG, then the pin baked into the container: line
       # Gitea >= 1.27 does not propagate the CALLER's workflow_dispatch inputs into a
       # called workflow's github.event, so a manual "review PR #N" dispatch arrived
       # here with an empty PR and died at the entrypoint's "PR required" check. The
@@ -125,11 +125,14 @@ jobs:
     # the owner's variables redirects every consumer's reviewer image (same blast
     # radius as editing this file, but without a commit trail).
     #
-    # Fallback pin: sha-b37cd09 — the provider-wide lens budget (PR #27) on top of
-    # the opencode CLI engine (PR #26) and the Gitea >= 1.27 workflow_call
-    # reclassification. Keep it current-ish when touching this file anyway.
+    # Fallback pin: sha-b850e35 — adds the qwen/kimi built-ins (PR #30: majordomo
+    # bumped for the qwen provider, a credential pre-flight that names the missing
+    # variable, and one no-cross-vendor-fallback rule so a keyless kimi/qwen
+    # endpoint can never send an OpenAI key to another vendor) on top of the
+    # provider-wide lens budget (PR #27). Keep it current-ish when touching this
+    # file anyway.
     container:
-      image: gitea.stevedudenhoeffer.com/steve/gadfly:${{ inputs.reviewer_tag || vars.GADFLY_REVIEWER_TAG || 'sha-b37cd09' }}
+      image: gitea.stevedudenhoeffer.com/steve/gadfly:${{ inputs.reviewer_tag || vars.GADFLY_REVIEWER_TAG || 'sha-b850e35' }}
     steps:
       - name: Run the gadfly reviewer
         run: /entrypoint.sh

.gitignore

@@ -1,3 +1,6 @@
 /gadfly
 /out
 *.orig
+
+# Local worktrees created for agent work — never part of the repo.
+.claude/worktrees/