fix(review): slug-scoped tags, decode names, drop fig picker & AI labels

- Taxonomy sync keeps fig-/feat- by slug (hyphen), not name; HTML-unescape names
- Review: remove AI assist labels; Features picker for feat-*; derive fig_tag_ids
  from Figure term names (casefold match, no bridges); decodeName on display
- Unit tests for scoped_tags, fig match, Review UI contract; docs slug wording

docs/capabilities/CREATE.md

@@ -78,7 +78,7 @@ default off (`SETTINGS-90`). Species rates are one flat value per synced leaf (`
 test-woo returns ok and detail, fails closed on missing credentials or non-HTTPS, and always
 resyncs taxonomy on success (`SETTINGS-80`, `SETTINGS-40`). test-inference returns ok, mode
 (stateful, stateless, or fail), vision_capable, and detail; fail blocks Call 2 only
-(`SETTINGS-45`). Taxonomy sync keeps only fig-* and feat-* tag families (`SETTINGS-51`), rebuilds
+(`SETTINGS-45`). Taxonomy sync keeps only tags whose **slug** starts with `fig-` or `feat-` (`SETTINGS-51`), rebuilds
 in one transaction, keeps the previous cache on failure (`SETTINGS-50`), and bumps the anchor only
 on a real stored-subset change (`SETTINGS-55`). The client re-pulls when the anchor advances, and
 publish refreshes when the last sync is over an hour old (`SETTINGS-60`).