fix: Only flag TODO comments in script code, not in strings/docstrings

Updated TODO detection to only flag actual TODO comments in the script code:
- Match pattern: '# TODO:' at start of line (actual work needed)
- Ignore: TODOs in docstrings, strings, or variable names
- Allows scripts like review_pr.py to check for TODOs in other code

Example false positive fixed:
- '"""Check for TODO/FIXME comments."""' - Not flagged
- 'pattern = re.compile(r"TODO")' - Not flagged
- '# TODO: implement this feature' - Still flagged (correct)

Author: rand

.github/workflows/validate-resources.yml

@@ -155,8 +155,10 @@ jobs:
           found=0
 
           while IFS= read -r script; do
-            if grep -qi '\bTODO\b' "$script"; then
-              echo "⚠️ $script: Contains TODO comments"
+            # Only flag TODO comments indicating work needed on this script
+            # Ignore TODOs in strings/docstrings about checking other code
+            if grep -qiE '^[[:space:]]*#[[:space:]]*TODO:' "$script"; then
+              echo "⚠️ $script: Contains TODO comments indicating incomplete work"
               ((found++))
             fi
             # Only flag "stub" in comments indicating incomplete work