S00-021: Approve S00-021: independently verified browser OMEMO blocker

Changes:
- Wrote state/evidence/S00-021-review.md recording independent re-checks of the
  executor's remediation for S00-004's interruption ("Agent timed out before
  escalation").
- Reproduced both committed probes unchanged: smoke.mjs exit 0 (SMOKE_PASS,
  631-byte session record byte-for-byte reload) and wasm-unsupported.mjs exit 2
  (wasmFiles 0, native-only prebuilds), matching executor evidence exactly.
- Independently re-queried npm registry: @signalapp/libsignal (browser WASM) E404;
  @signalapp/libsignal-client 0.105.0 (native, AGPL-3.0) exists; confirms the
  browser/worker/WASM + OMEMO2 wire-layer blocker is genuine.
- Audited scope via git: commit 30f7f22 touches only the in-scope ADR
  docs/decisions/0003-crypto-library.md plus workflow metadata; experiments/**
  unchanged; working tree clean. No requirement bypass: S00-004 remains blocked,
  ADR 0003 records the honest blocker and forbids done on persistence+Ratchet alone.

Validation:
- make check: 72 tooling tests OK.
- Both probes reproduced, exit codes and output match evidence.
- Acceptance met: interruption repro row exists for next executor; original not
  declared done via bypass.

Task: S00-021
Reviewer agent: auto-security-5d2ae592b569
Role: security
Action: approve

Task: S00-021
Agent: auto-security-5d2ae592b569
Role: security
Action: review
Status: done

Task title: Устранить прерывание: Проверить browser OMEMO backend

state/tasks.json

@@ -1,6 +1,6 @@
 {
   "schema_version": 1,
-  "revision": 59,
+  "revision": 60,
   "tasks": {
     "S00-001": {
       "status": "done",
@@ -47,17 +47,17 @@
       "resumed_after_blocker": true
     },
     "S00-004": {
-      "status": "blocked",
-      "owner": "auto-crypto-8bf3dcf711b9",
+      "status": "todo",
+      "owner": null,
       "started_at": "2026-10-15T08:02:39+00:00",
-      "reason": "Agent timed out; process terminated before escalation",
-      "updated_at": "2026-10-15T08:32:40+00:00",
-      "blocked_by": [
-        "S00-021"
-      ],
+      "reason": null,
+      "updated_at": "2026-10-15T08:40:27+00:00",
+      "blocked_by": [],
       "resume_status": "in_progress",
       "blocker_report": "state/blockers/S00-021.md",
-      "handoff": "state/handoffs/S00-004.md"
+      "handoff": "state/handoffs/S00-004.md",
+      "previous_owner": "auto-crypto-8bf3dcf711b9",
+      "resumed_after_blocker": true
     },
     "S00-005": {
       "status": "todo",
@@ -1279,14 +1279,17 @@
       "updated_at": "2026-10-15T07:27:20+00:00"
     },
     "S00-021": {
-      "status": "review",
+      "status": "done",
       "owner": "auto-crypto-fcef9b6781bf",
       "external_wait": false,
       "reason": null,
       "started_at": "2026-10-15T08:32:48+00:00",
-      "updated_at": "2026-10-15T08:38:43+00:00",
+      "updated_at": "2026-10-15T08:40:27+00:00",
       "evidence": "state/evidence/S00-021-auto-crypto-fcef9b6781bf.md",
-      "handoff": "state/handoffs/S00-021.md"
+      "handoff": "state/handoffs/S00-021.md",
+      "reviewer": "auto-security-5d2ae592b569",
+      "review_evidence": "state/evidence/S00-021-review.md",
+      "completed_at": "2026-10-15T08:40:27+00:00"
     }
   },
   "events": [
@@ -2044,6 +2047,27 @@
       "to": "review",
       "reason": null,
       "evidence": "state/evidence/S00-021-auto-crypto-fcef9b6781bf.md"
+    },
+    {
+      "revision": 60,
+      "at": "2026-10-15T08:40:27+00:00",
+      "action": "auto-unblock",
+      "task": "S00-004",
+      "resolved_by": "S00-021",
+      "to": "todo",
+      "fresh_agent_required": true
+    },
+    {
+      "revision": 60,
+      "at": "2026-10-15T08:40:27+00:00",
+      "action": "approve",
+      "task": "S00-021",
+      "agent": "auto-security-5d2ae592b569",
+      "role": "security",
+      "from": "review",
+      "to": "done",
+      "reason": null,
+      "evidence": "state/evidence/S00-021-review.md"
     }
   ],
   "retired_agents": [