Summary

• remove legacy prompt APIs: get_code_review_prompt, get_security_review_prompt, and get_security_audit_prompt
• remove legacy security-audit aliases in runner/module (run_security_audit, _extract_security_findings)
• keep a single unified prompt entrypoint and extract shared prompt helpers for diff/file-reading sections
• update tests to target unified APIs (get_unified_review_prompt, run_code_review, _extract_review_findings)
• update docs to describe unified prompt behavior for custom security instructions

Validation

• pytest claudecode -v
• ~/.bun/bin/bun test scripts/comment-pr-findings.bun.test.js

Notes

• local untracked files .DS_Store and docs/header.svg were not included in this PR.