Summary

Refines the agent worktree policy so the read-only code-review agents (argos, athena) may opt into an isolated git worktree to run their parallel CR pass when isolation is genuinely needed, and makes daidalos clean every CR worktree up after the run / merge so the repository and codebase stay clean.

This is a deliberate, scoped relaxation of the earlier "git worktrees are forbidden across the whole workflow" rule — not a blanket reversal:

• Writing path unchanged. talos (and every writing daidalos run) still never uses a worktree and still serialises on the single shared working tree via the write-lock. There is no isolated-worktree escape for the writing path.
• CR pass gains the opt-in. Because argos / athena are read-only, an isolated checkout lets the two parallel CR passes review a stable diff without contending with the writing path or each other. This is exactly the explicit-request opt-in of @rules/git/general.mdc Worktrees / Workspaces, granted to the CR pass only.
• Daidalos owns cleanup. Each CR agent records any worktree path in its handoff; daidalos removes them in step 7 (git worktree remove + git worktree prune, never --force, skipping the active/dirty tree), and after a merge confirms @skills/merge-github-pr/SKILL.md left no orphaned branch / worktree / temp file behind. A CR agent run standalone removes its own worktree.

Changes

• agents/daidalos.md — Concurrency & the working-tree write-lock section retitled and rewritten (writing path stays on the shared tree, read-only CR may isolate); step 6 instructs the CR dispatch prompts to grant the worktree opt-in; step 7 gains explicit worktree + post-merge cleanup.
• agents/argos.md, agents/athena.md — new Parallel review worktree (optional) section + a Worktree: handoff field.
• docs/agents.md — concurrency narrative updated to match (writing path never uses worktrees; CR pass may isolate; daidalos cleans up).
• tests/Installer/AgentsTest.php — worktree pinning test rewritten to the new policy, plus a new test asserting both CR agents document the opt-in worktree and hand it back for cleanup.
• CHANGELOG.md — Unreleased entry.

Testing

• composer build — green (install + fix + full check: skill-check, normalize, phpcs, pint, rector, phpstan, security-audit, test:coverage). 324 tests / 1856 assertions pass, 100% coverage.
• vendor/bin/pest tests/Installer/AgentsTest.php — 29 passed.

Notes

• No tracker issue — this is a free-form request implemented directly.
• Change is confined to agent prose, docs, the pinning test, and the changelog — no production PHP and no security surface, so the inline security review is a no-op.