AI Review Feature

[y-ptk]

This PR adds AI-based review functionality.

[codecov-commenter]

Welcome to Codecov 🎉

Once you merge this PR into your default branch, you're all set! Codecov will compare coverage reports and display results in all future pull requests.

Thanks for integrating Codecov - We've got you covered ☂️

[github-actions]

🤖 Security Issue: JWT token signature validation is completely disabled with ValidateIssuerSigningKey=false and a custom SignatureValidator that bypasses all validation

Severity: HIGH
Category: authentication_bypass
Tool: ClaudeCode AI Security Analysis

Exploit Scenario: Attacker can forge any JWT token by modifying claims (user ID, roles, etc.) without needing the signing key. The comment 'comment this and add this line to fool the validation logic' indicates intentional bypass. Attacker could create admin tokens or impersonate any user.

Recommendation: Enable proper JWT validation by setting ValidateIssuerSigningKey=true, removing the custom SignatureValidator, and setting RequireSignedTokens=true