feat: add daily manual price review workflow

arr_processing/README.md

@@ -11,3 +11,5 @@ stdout/stderr, temporary paths and source bytes never enter the public response
 
 Older remote-run, signature and callback modules remain as ARR1 compatibility/audit code. The ARR2 Web entrypoint does
 not import them, root requirements do not install their HTTP client, and Compose exposes no corresponding service.
+When that retired path is composed for audit or a historical callback, it uses its frozen v3 success/failure projection;
+it cannot enter `review_required` or accept an artificial price.