Records a human review decision (`approved` ∨ `rejected`) on a previously submitted Special Ops review card. Governs the already-shipped `decideReviewCard` repository handler in `api-application-monolith`; authored here (Managed CompanyOS production contracts surface) rather than the `packages/examples/special-ops-cockpit` fixture, which stays a pure demo.

Scope: tenant- and workspace-scoped. The handler resolves the actor session to an access scope and refuses cross-scope mutation (`TENANT_MISMATCH`). Decision is human-only — this is the anti-surveillance human-review boundary, not an automated transition.

Idempotency: `idempotencyKey` is required. Replays return the original result with `idempotentReplay = true`; the underlying evidence receipt is preserved.

Audit: every decision is intended to emit a `managed_companyos_audit_events` row (see `sideEffects.audit`) distinct from the in-memory evidence receipt.

Compatibility intent: **additive** (new operation key, no change to existing contracts).