[godv61]

Adds task-scoped requirement materials and a readable task workbench. New tasks store their ledger, requirement summary, active materials and Sonar reports under .dsh/tasks/<id>/; old flat records are not scanned or migrated.

Requirement-stage Skills can produce confirmation documents through the controlled material API while code changes remain blocked until approval. The product-clarification Skill remains an optional repository example. The workbench adds plan, scope, evidence and document views with Markdown export.

Also supports DSH rc.3/rc.4/rc.5 (built against rc.5), fixes direct implementation → independent review handoff and equivalent successful verification reuse, recognizes standard-library unittest results, routes exact registered test commands to dev_task verify, and supports a bounded per-call verification timeout. Default delegation and review selection conditions remain unchanged.

Validation:

• Typecheck, build, 432 regression tests (425 passed, 7 existing skips), 143 P0 checks.
• Cold package installation, client resources and actual Git hook behavior.
• Actual rc.5 SDK and source-host installation; generic low/medium real-model cases completed with 4/24 passing tests and local commits/archive.
• Real cases required environment approvals and recovery from model JSON stream errors. Final routing/timeout additions have regression and actual SDK coverage, without claiming another complete real-model rerun.
• The medium committed snapshot was independently checked with the original baseline: 24 tests passed.

Release notes and detailed test reports are in docs/releases/0.40.0.md and docs/testing/. Local profiles, credentials, temporary runs and two unrelated worktree changes are excluded.