fix(review): warn on self-targeted asset publishing

[AaronZ345]

Summary

• Add a best-effort self-targeting warning for qwen review publish-assets when QWEN_REVIEW_ASSETS_REPO resolves to the reviewed repository.
• Resolve the reviewed repository from --reviewed-repo when available, otherwise from gh repo view, preserving fork-parent behavior.
• Cover the case-insensitive self-target warning path with a regression test.

Root Cause

The automated review lanes stopped publishing evidence into the repository under review, but the user-invoked publish-assets command still accepted stale local QWEN_REVIEW_ASSETS_REPO=<repo-under-review> settings without any signal. That could keep creating pr-assets/* refs in the reviewed repository.

Fixes #10239.

Test Plan

• npm run test --workspace packages/cli -- src/commands/review/publish-assets.test.ts --pool threads --maxWorkers 1
• npx prettier --check packages/cli/src/commands/review/publish-assets.ts packages/cli/src/commands/review/publish-assets.test.ts

Notes

• npm run build is currently blocked in this worktree by the pre-existing packages/core/src/core/client.telemetrySwap.test.ts duplicate-property TypeScript error tracked separately in fix(core): remove duplicate telemetry test registry stub #10243.