Add reviewer's guide

[grst]

This serves multiple purposes

• reference for humans who review ecosystem packages (I showed how to do it to individual core team members in the past, it should make it easier if there's written documentation)
• transparency how review is done
• 'skill' for AI agents. While I don't want the full review to be done by AI, I think it can take over most of the basic checks if the criteria are fulfilled.