Add ability to exclude repos from verification with mandatory reason

```
│  Agent powering down. Goodbye!
│
│  Interaction Summary
│  Session ID:                 cd71bf4b-7267-4be7-9ad5-910c1bf4d896
│  Tool Calls:                 18 ( ✓ 17 x 1 )
│  Success Rate:               94.4%
│  User Agreement:             100.0% (18 reviewed)
│  Code Changes:               +75 -16
│
│  Performance
│  Wall Time:                  22m 17s
│  Agent Active:               8m 29s
│    » API Time:               4m 46s (56.3%)
│    » Tool Time:              3m 42s (43.7%)
│
│
│  Model Usage                 Reqs   Input Tokens   Cache Reads  Output Tokens
│  ────────────────────────────────────────────────────────────────────────────
│  gemini-2.5-flash-lite          4          6,748             0            330
│  gemini-3-pro-preview          20         75,693       347,715         11,245
│  gemini-2.5-flash               2              0             0              0
│
│  Savings Highlight: 347,715 (80.8%) of input tokens were served from the cache, reducing costs.
```

example.toml

@@ -16,6 +16,15 @@ repos = [
 	{ url = "https://github.com/justcallmekoko/ESP32Marauder" }
 ]
 
+# Optional: List of repository names to exclude from verification (if --verify-canfetch is used)
+repos_exclude_verify = [
+    { name = "ESP32Marauder", reason = "This repo is known to be flaky." },
+    { name = "some-other-repo", reason = """
+    This repo is very large and times out.
+    We will fix this later.
+    """ }
+]
+
 organizations = [
 	{ url = "https://gitea.hak8or.com/mirrors" },
 ]