Mint signed review link

Uses the same HMAC as S² Ecosystem when built with --dart-define=CONTENT_REVIEW_SECRET=…. Client opens: https://your-app/#content-review?t=TOKEN