v2.0.2 - single-file review and autocontext fixes

Patch release. review and security now work on single-file paths (previously they silently scanned 0 files and reported PASSED); a lone JS/TS file resolves its owning project and eslint targets just that file. autocontext labels code fences with the real language instead of python, and caps each memory value at 400 chars so a verbose legacy snapshot cannot consume the memory budget. Includes guidance for purging legacy pre-scoping snapshot pollution from shared memory stores. 134 tests passing.