[silbulatovich]

Problem

ci review could exit successfully when the review detail response belonged to a different review or commit. Identity validation was enforced for SARIF output, but not consistently before computing CI verdicts.

Reproduced with an HTTP integration test committed separately before the fix.

Fix

• Validate the review ID on every detail read, including during polling.
• Verify the commit SHA, review type, and repository UUID before accepting a CI result.
• Reuse identity validation across output modes.
• Preserve compatibility with older API responses and renamed repositories.

Testing

• 95 tests passed; 1 ignored (requires pre-commit).
• Original regression test confirmed failing before the fix and passing afterward.
• cargo fmt, Clippy, and cargo deny passed (cargo deny reported existing dependency warnings).