GitHub Copilot Prompt Files in .github/prompts

Keep single-use task instructions out of persistent config files and store reusable workflows in a custom prompts/ folder inside the dot directory so you can trigger them manually in chat via @prompts/my-custom-workflow.

File: .github/prompts/pr-security-review.md (Triggered via @prompts/pr-security-review)

Review all staged changes for SQL injection, missing authentication middleware, and unvalidated environment variables.