prompt="An independent reviewer read your app. Fix the findings below (still unattended: no questions), keep the shared suite passing locally, redeploy with make deploy, re-run scripts/test-app.sh against https://todo-$slug.bfj.oncarlos.com, commit, and update STATUS.md. Fix only what is listed. If you disagree with a finding, leave the code as it is and say why in STATUS.md under '## Review findings not fixed'.