fix: bind skill reviews to mother and team roots

modules/fifth-domain-lighthouse-sanitized-mirror/receipts/self-test.hdlp

@@ -1,7 +1,7 @@
 schema: tcs.module-self-test-receipt/v1
 module_id: TCS-AGENT-SANITIZED-MIRROR-001
 result: PASS
-tests: 7/7
+tests: 8/8
 verified:
   - committed architecture projection contains no private absolute path
   - missing persona share decision creates no candidate
@@ -9,6 +9,7 @@ verified:
   - sanitization produces quarantine only and never publication
   - mother acceptance is required before team review
   - both reviews bind the exact candidate hash and use independent reviewers
+  - review commands cannot replace the registered mother or team authority root
   - replay with changed content and review hash drift are rejected
 repository_regression: node --test 483/483 PASS
 tcs_root_regression: 5/5 PASS