Add TUI kanban board, review workflow, and new task statuses

Replace task statuses (pending/running/succeeded/failed/cancelled) with
a kanban workflow: todo → in_progress → in_review → done/wontdo.

When a non-review agent task completes, the API auto-creates a child
review task and moves the parent to in_review. Only humans can move
tasks from in_review to done/wontdo via the TUI.

New components:
- cmd/tui: bubbletea kanban board with $EDITOR integration
- POST /api/v1/tasks/{id}/complete: agent completion callback
- Operator --api-url flag for completion callbacks
- ProviderQueue sets tasks to in_progress on pickup
- AgentTask reconciler calls /complete on job finish

internal/controller/providerqueue_controller.go

@@ -6,6 +6,7 @@ import (
 	"fmt"
 	"io"
 	"net/http"
+	"strings"
 	"time"
 
 	metav1 "k8s.io/apimachinery/pkg/apis/meta/v1"
@@ -47,7 +48,7 @@ func (r *ProviderQueueReconciler) Reconcile(ctx context.Context, req ctrl.Reques
 		httpClient = &http.Client{Timeout: 10 * time.Second}
 	}
 
-	resp, err := httpClient.Get(queue.Spec.Endpoint + "/tasks?status=pending")
+	resp, err := httpClient.Get(queue.Spec.Endpoint + "/tasks?status=todo")
 	if err != nil {
 		now := metav1.Now()
 		queue.Status.LastPoll = &now
@@ -95,6 +96,9 @@ func (r *ProviderQueueReconciler) Reconcile(ctx context.Context, req ctrl.Reques
 			ObjectMeta: metav1.ObjectMeta{
 				Name:      fmt.Sprintf("task-%s", task.ID[:8]),
 				Namespace: req.Namespace,
+				Annotations: map[string]string{
+					"forgebot.unkin.net/api-task-id": task.ID,
+				},
 			},
 			Spec: forgebotv1alpha1.AgentTaskSpec{
 				PoolRef:    binding.Spec.AgentPoolRef,
@@ -119,6 +123,14 @@ func (r *ProviderQueueReconciler) Reconcile(ctx context.Context, req ctrl.Reques
 			continue
 		}
 
+		patchURL := queue.Spec.Endpoint + "/tasks/" + task.ID
+		patchBody := fmt.Sprintf(`{"status":"in_progress","jobName":"%s"}`, agentTask.Name)
+		patchReq, _ := http.NewRequestWithContext(ctx, http.MethodPatch, patchURL, strings.NewReader(patchBody))
+		patchReq.Header.Set("Content-Type", "application/json")
+		if _, err := httpClient.Do(patchReq); err != nil {
+			logger.Error(err, "failed to update task status", "task", task.ID)
+		}
+
 		queue.Status.TasksCreated++
 		logger.Info("created AgentTask", "task", agentTask.Name, "command", task.Command)
 	}