Review desk: every recorded answer gets an attending surface

redoal_gestures and redoal_subscribers were written by the public
landing page but read by nothing - answers would have landed unseen.
/review (owners-gated via _section.yaml) now lists both, with an
owner-side retire transition for bouncing subscriber addresses.

Co-Authored-By: Claude Fable 5 <noreply@anthropic.com>

questions/review/_section.yaml

@@ -0,0 +1,3 @@
+# Everything under /review is the owners' area - the desk that keeps
+# redoal.com's recorded answers attended.
+qualifies: owners

questions/review/index.yaml

@@ -0,0 +1,39 @@
+# The attending surface for everything redoal.com records: no public
+# question's answer may land in a bucket nothing reads - this desk is
+# that guarantee for redoal_gestures and redoal_subscribers (uhhm's
+# /review plays the same role for its buckets).
+name: The review desk
+description: >
+  Everything redoal.com records, in one place.
+alternatives:
+  - name: Gestures
+    description: >
+      Drawn paths from "Our Understanding" — each holds the visitor's
+      points and the 20-byte gesture key the relay computed.
+    features:
+      - name: ""
+        description: ""
+        resource:
+          source:
+            kind: kv
+            bucket: redoal_gestures
+          requires_group: owners
+
+  - name: Subscribers
+    description: >
+      Who asked to hear when there's something to run. Unsubscribing
+      is theirs to do (the chain link in their receipt), but the desk
+      can retire an address that bounces.
+    action: /review
+    consequence: [Confirm]
+    features:
+      - name: ""
+        description: ""
+        resource:
+          source:
+            kind: kv
+            bucket: redoal_subscribers
+          requires_group: owners
+          transitions:
+            - to: unsubscribed
+              label: Unsubscribe