docs: fix CORS proxy path and add link to source in FAQ

Update CLAUDE.md to reference correct api/bugzilla.ts path.
Add clickable link to CORS proxy source code in FAQ answer
about API key security.

Author: msujaws

CLAUDE.md

@@ -38,7 +38,7 @@ Slices are composed in `src/store/index.ts`. Devtools disabled in production to
 
 - `src/lib/bugzilla/client.ts`: BugzillaClient class for API calls
 - `src/lib/bugzilla/status-mapper.ts`: Maps Bugzilla statuses ↔ Kanban columns
-- `api/bugzilla/[...path].ts`: Vercel serverless CORS proxy to bugzilla.mozilla.org
+- `api/bugzilla.ts`: Vercel serverless CORS proxy to bugzilla.mozilla.org
 
 ### Branded Types
 

src/components/FAQ/FaqModal.tsx

@@ -26,8 +26,22 @@ const faqs = [
   },
   {
     question: 'Is my API key secure?',
-    answer:
-      'Your API key is encrypted and stored locally in your browser. API requests pass through our open-source CORS proxy to reach Bugzilla (required due to browser security restrictions). We do not log or store your key. You can review the proxy code on GitHub.',
+    answer: (
+      <>
+        Your API key is encrypted and stored locally in your browser. API requests pass through our
+        open-source CORS proxy to reach Bugzilla (required due to browser security restrictions). We
+        do not log or store your key. You can review the{' '}
+        <a
+          href="https://github.com/msujaws/bugzilla-kanban/blob/9feb76a280193ce43ba55c841b3071fb996513e6/api/bugzilla.ts"
+          target="_blank"
+          rel="noopener noreferrer"
+          className="text-accent-primary hover:underline"
+        >
+          proxy code on GitHub
+        </a>
+        .
+      </>
+    ),
   },
   {
     question: 'What do the columns mean?',