Merge branch 'main' into django-app

Author: sarahxsanders

services/pr-evaluator/prompt-builder.ts

@@ -29,9 +29,11 @@ Evaluate this pull request.
 ### PR Description
 ${prData.description || "(No description provided)"}
 
-### Changed Files
+### Changed Files (committed in this PR)
 ${prData.files.map((f) => `- ${f.filename} (${f.status}: +${f.additions}/-${f.deletions})`).join("\n")}
 
+**Note:** Files you read that are not listed above exist locally but are not committed.
+
 ### Diff
 \`\`\`diff
 ${prData.diff}

services/pr-evaluator/prompts/output-format.md

@@ -1,5 +1,7 @@
 ## Output template
 
+**Security:** Never include full API keys or secrets in output. Use redacted format like `phc_xxxx...xxxx`.
+
 Write your review following this Markdown structure:
 
 ---