✨ feat(vscode): 七份提示词统一走 Handlebars，头脑风暴三档合一

- 模板引擎换成 Handlebars（noEscape，提示词是纯文本不能被转义），单花括号写法彻底退场
- brainstorm-continue / brainstorm-continue-prototype 两份并进 brainstorm.md，
  用 {{#if issueNumber}} 分新建 / 续聊，续聊里用 {{#if prototypeFile}} 嵌原型段落，
  设置面板对应的两个 textarea 一并删掉
- 模板上下文 = 工单 state JSON 全量字段 + issueNumber / userRequest / nonce /
  planFile / prNumber / prRef，以后模板想用新字段不用改扩展代码
- 各会话入口共用一条 state 读取路径，读失败只记 warn 按空状态继续，不拦开会话
- 升级后首次启动把存量自定义提示词迁到双花括号并合并成一份，改写前把
  settings.json 备份成 settings.json.bak-<时间戳>，迁移动作全写日志
- 装 handlebars 时给 vsce 传递依赖的老 semver 加 trustPolicyExclude 豁免，
  否则 no-downgrade 策略卡住整个装包

Claude-Session: https://claude.ai/code/session_01Kgmb1LvrPmFX3NoUDB4zZC

vscode/src/webhook/coordinator.ts

@@ -17,7 +17,7 @@ import { promises as fsp } from 'node:fs'
 import { env, Uri, window, workspace } from 'vscode'
 import { loginForToken } from '../auth/identity'
 import { getToken } from '../auth/secrets'
-import { getReviewPrompt } from '../cc/prompts'
+import { renderReviewPrompt } from '../cc/prompts'
 import { isMailboxIssue } from '../cc/sessionHandoff'
 import { detectRepo } from '../git/remote'
 import { deleteWebhook, getIssue, getPullRequest, listIssueComments } from '../gitea/api'
@@ -1623,36 +1623,33 @@ class WebhookCoordinator {
       return
     }
 
+    // state 读一次，既当审查提示词的模板上下文，又给 worktree 兜底。读失败按空
+    // 状态继续——审查照常开，triggerAutoReviewTab 会回退 workspaceRoot 并 toast。
+    let state: Record<string, unknown> = {}
+    try {
+      state = await readStateJsonComment({
+        host: ctx.host,
+        token: ctx.token,
+        owner: ctx.owner,
+        repo: ctx.repo,
+        issueNumber,
+      })
+    }
+    catch (err) {
+      const message = err instanceof Error ? err.message : String(err)
+      logger.add({
+        level: 'warn',
+        source: 'webhook',
+        message: `读取 state JSON 失败（triggerReview）#${issueNumber}`,
+        details: message,
+      })
+    }
+
     // worktree 是本机状态:优先 workspaceState 本地记录('' 墓碑 = 本机已删,
-    // 不回落);本地无记录时读共享评论兜底(存量数据)。缺失不硬失败——
-    // triggerAutoReviewTab 会回退 workspaceRoot 并 toast。
-    let worktreePath = ''
+    // 不回落);本地无记录时才用共享评论里的值(存量数据)。
     const local = getLocalIssueState(this.ctx, 'gitea', issueNumber)
-    if (local.worktreePath !== undefined) {
-      worktreePath = local.worktreePath
-    }
-    else {
-      try {
-        const state = await readStateJsonComment({
-          host: ctx.host,
-          token: ctx.token,
-          owner: ctx.owner,
-          repo: ctx.repo,
-          issueNumber,
-        })
-        if (typeof state.worktreePath === 'string')
-          worktreePath = state.worktreePath
-      }
-      catch (err) {
-        const message = err instanceof Error ? err.message : String(err)
-        logger.add({
-          level: 'warn',
-          source: 'webhook',
-          message: `读取 state JSON 失败（triggerReview）#${issueNumber}`,
-          details: message,
-        })
-      }
-    }
+    const worktreePath = local.worktreePath
+      ?? (typeof state.worktreePath === 'string' ? state.worktreePath : '')
 
     logger.add({
       level: 'info',
@@ -1660,7 +1657,7 @@ class WebhookCoordinator {
       message: `开始审查 #${issueNumber} worktreePath=${worktreePath || '(none)'}`,
     })
 
-    const prompt = getReviewPrompt(this.ctx, { prNumber })
+    const prompt = renderReviewPrompt(this.ctx, { state, issueNumber: String(issueNumber), prNumber })
 
     const ok = await this.activePanel.triggerAutoReviewTab({
       issueNumber,