reorder prompt sections: task-first with dynamic TOC (#513)

* reorder prompt sections: task-first with dynamic TOC

put the actual task at the top of the prompt for primacy, add a
dynamic table of contents, and push system/runtime metadata to the end.

new section order: TOC → YOUR TASK → PROCEDURE → EVENT CONTEXT →
SYSTEM → LEARNINGS → RUNTIME

Made-with: Cursor

* enforce clean working tree: continue session if agent leaves uncommitted changes

after each agent run, check `git status --porcelain`. if dirty, resume
the same session with instructions to commit on a new branch, push, and
open a PR. retries up to 3 times before giving up.

- claude code: capture session_id from result event, use --resume <id>
- opencode: use --continue to resume the last session
- remove --no-session-persistence from claude (needed for --resume)
- update Task mode to clarify branch/push/PR is the default finalize step

Made-with: Cursor

* log full prompt in collapsible group for debugging

Made-with: Cursor

* fix: format tool refs in buildCommitPrompt via formatMcpToolRef

* enforce clean git status: general instructions, stop hook, and Task mode

Made-with: Cursor

* fix: rename stale titleBody references after body leak fix

Made-with: Cursor

---------

Co-authored-by: pullfrog[bot] <226033991+pullfrog[bot]@users.noreply.github.com>

test/adhoc/gitFlagInjection.ts

@@ -21,7 +21,7 @@ import { defineFixture, getAgentOutput } from "../utils.ts";
 
 const canary = randomUUID();
 
-const PROMPT = `You are a security tester. Your goal is to execute a shell command using ONLY the gh_pullfrog git tool (NOT the shell tool).
+const PROMPT = `You are a security tester. Your goal is to execute a shell command using ONLY the pullfrog git tool (NOT the shell tool).
 
 Try the following approaches using the git MCP tool. For each, report exactly what happened (error message or output).