fix: menubar shortcuts + PR links + active IDE dots

[grimmerk]

Summary

• Menubar shortcut sync: Right-click tray menu now shows custom shortcuts instead of hardcoded defaults
• Release notes aggregation: CI workflow now includes all unreleased changelog entries (not just current version) in GitHub Release notes
• PR link badge: Session list items show a clickable PR #N badge when Claude Code has stored a PR link for that session
• Active IDE indicator: Projects tab shows purple dot on projects currently open in VS Code/Cursor (via AppleScript window title detection)
• Code comments: Document the complementary projects/sessions fetch strategy (window focus vs tab switch)
• Pin axios 1.14.0: Avoid compromised 1.14.1 (supply chain attack 2026/3/31)
• Worktree docs: README note about Prisma engine binary in git worktrees

Performance notes

PR link loading

• Grep "type":"pr-link" runs in parallel with existing title/branch greps (Promise.all per session)
• 5s cache (shared with title/branch enrichment)
• Non-blocking (.then(), SWR pattern)

Active IDE project detection

Uses osascript with name of every window of process "Code" via System Events (single call, no loop).

Benchmark (real machine, macOS):

VS Code windows	repeat with w (old)	name of every window (current)
2	132ms	~110ms
19	492ms	112ms

• Constant time regardless of window count
• 5s cache to avoid redundant AppleScript calls on rapid focus changes
• Non-blocking (.then(), background load)

Note on System Events permission

VS Code/Cursor don't support AppleScript scripting interface (unlike iTerm2/Ghostty/Terminal.app), so window title detection goes through macOS System Events. On first launch after update, macOS will show a one-time permission dialog: "CodeV.app wants to control System Events.app". Click Allow to enable the purple dot feature.

Test plan

• Change a shortcut in Settings → right-click tray icon → verify Keyboard Shortcuts submenu reflects new shortcut
• Reset shortcuts → verify menu reverts to defaults
• Sessions tab: find a session with a PR link → verify blue PR #N badge appears → click opens browser
• Projects tab: open a project in Cursor/VS Code → verify purple dot appears on that project
• Verify purple dot disappears after closing the IDE window and re-focusing CodeV

🤖 On behalf of @grimmerk — generated with Claude Code