Merge dev into main

[factory-nizar]

Promotes dev to main. Last release was Release v5 (#78) on 2026-04-16 (12 days ago).

Changes since v5

Only 2 PRs have landed on dev since the last release:

• fix: prevent @fill from inferring wrong Linear ticket references #73 — fix: prevent @fill from inferring wrong ticket references (1 commit)
• docs(readme): add /install-code-review setup and expand security review instructions #80 — docs(readme): add /install-code-review setup and expand security review instructions (8 commits, README-only)

Code vs. docs

• Behavior change: only fix: prevent @fill from inferring wrong Linear ticket references #73 (a small fill-command bugfix).
• Documentation: PR docs(readme): add /install-code-review setup and expand security review instructions #80 — adds /install-code-review quickstart, expands @droid security / @droid security --full sections with "Enabling automatic security review" and "Scheduling full-repo scans" YAML examples, drops the internal "Updating Review Models" section, simplifies the review_model guidance with sample model IDs, and pins all workflow snippets to Factory-AI/droid-action@main instead of @v5.

Notes

Opened as draft — convert to ready-for-review when we're ready to cut a release.