Add Phase-1b plan: bounded review & lint pass at the end of Phase 1

Before scaling to many recipes: (1) deterministic style/hygiene via linters/formatters
(alejandra/statix/deadnix, ruff, shellcheck/shfmt) wired as a .drone.yml stage so commits
stay clean; (2) a white-box review checklist with teeth (real tests not health-only/skipped,
DRY harness, Nix-declared idempotent bring-up, no footguns/secrets-in-code, architecture
matches plan) — blocking fixed, advisory triaged. Bounded pass; never weaken a test for a
nit. Phase 2 now follows 1b. Linked in README.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

cc-ci-plan/plan-phase2-recipe-tests.md

@@ -1,6 +1,7 @@
 # cc-ci Phase 2 — Comprehensive per-recipe test authoring (Autonomous Build Plan)
 
-**Status:** QUEUED — starts only after Phase 1 (`plan.md`) reaches `## DONE`.
+**Status:** QUEUED — starts after Phase 1 (`plan.md`) and the Phase-1b review/lint pass
+(`plan-phase1b-review-lint.md`) reach `## DONE`.
 **Builds on:** the Phase-1 cc-ci CI server (`plan.md`). This phase adds **test content**, not infra.
 **Reference corpus:** `references/recipe-maintainer/` → `/srv/recipe-maintainer/` (the existing,
 human-maintained recipe tests — the canonical source to port from).