fix: retain exec review resources after timeout (#143308)

* fix(agents): retain exec reviewer resources through timed-out work

* test: migrate exec security floor to acquired completion