Abstimmung: mehrere Agenten pruefen unabhaengig und stimmen blind ab (#702)

A unit can put operations to a blind vote instead of its lead. Not opinions
are counted but independent checks enforced.

- UnitConfig.votes: operations, voters, approveAt, rejectAt, quorum, hours,
  perDay - set only by a human (OrgAdministration.SetVotes).
- Core/Staging/Votes: routes a covered staged call before the lead; one task
  per voter with the frozen call and nothing else; cast_vote needs reasoning
  and evidence. Counted as soon as the result is settled; in between and
  without the quorum a human decides. The proposer does not vote, voters that
  read foreign content get no ballot, changes to agents never go to a vote.
- Escalation tool: list_ballots, cast_vote.
- Approvals view shows each vote with every ballot and the voters' costs;
  organisation view sets the rule and lists the votes held.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>

src/ClawdDotNet.Web/Endpoints/OrganisationEndpoints.cs

@@ -29,7 +29,8 @@ internal static class OrganisationEndpoints
                     new UnitDefaultsDto(u.Defaults.Model, u.Defaults.DailyCostUsd, u.Defaults.DailyTokens, u.Defaults.WhenExhausted),
                     chart.PathOf(u.Id), chart.Depth(u.Id),
                     u.Approvals is { } ap ? new UnitApprovalsDto(ap.Operations, ap.PerDay, ap.Hours) : null,
-                    u.Inspection is { } ins ? new UnitInspectionDto(ins.Rate, ins.DenseRate, ins.NewDays, ins.PerDay) : null))
+                    u.Inspection is { } ins ? new UnitInspectionDto(ins.Rate, ins.DenseRate, ins.NewDays, ins.PerDay) : null,
+                    u.Votes is { } v ? new UnitVotesDto(v.Operations, v.Voters, v.ApproveAt, v.RejectAt, v.EffectiveQuorum, v.Hours, v.PerDay) : null))
                 .ToList();
 
             var agents = host.Instance.Agents
@@ -104,6 +105,20 @@ internal static class OrganisationEndpoints
             return Results.Ok(new OutcomeDto(true, set.IsEmpty ? $"Doctrine of '{unit.Name}' removed." : $"Doctrine of '{unit.Name}' set (version {set.Version})."));
         });
 
+        // #702: What the unit puts to a blind vote, and the votes held.
+        org.MapPut("/units/{unitId}/votes", (AppHost host, string unitId, VotesInputDto input) =>
+            host.Organisation.SetVotes(unitId, input.Operations, input.Voters, input.ApproveAt, input.RejectAt, input.Quorum, input.Hours, input.PerDay, input.Reason).ToResponse());
+
+        org.MapGet("/units/{unitId}/votes", async (AppHost host, string unitId, CancellationToken ct) =>
+        {
+            if (host.Engine?.Votes is not Core.Staging.Votes votes)
+                return Results.Ok(Array.Empty<VoteDto>());
+            var list = new List<VoteDto>();
+            foreach (var vote in await votes.RecentAsync(unitId, 20, ct))
+                list.Add(await VoteMapping.ToDtoAsync(vote, votes, ct));
+            return Results.Ok(list);
+        });
+
         // #693: The lead's spot checks — how often, what came of them, and the measures it proposed.
         org.MapPut("/units/{unitId}/inspection", (AppHost host, string unitId, InspectionInputDto input) =>
             host.Organisation.SetInspection(unitId, input.Enabled, input.Rate, input.DenseRate, input.NewDays, input.PerDay, input.Reason).ToResponse());