chore: add pentest-fix prompt and wire verification into loop.sh

- loop/prompt-pentest-fix.md: dedicated prompt for pentest fix overnight
  runs, instructs Claude to run verify-pentest-fixes.sh as final step
- loop/loop.sh: automatically runs verification script when all plan
  tasks are complete (runs for any plan, not just pentest)

Usage: PROMPT_FILE=loop/prompt-pentest-fix.md caffeinate -i ./loop/loop.sh

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

loop/loop.sh

@@ -76,7 +76,20 @@ while [ "$i" -le "$ITERATION_COUNT" ]; do
 
   if ! plan_has_tasks; then
     banner "ALL TASKS COMPLETE"
-    log "  No remaining tasks in plan.md. Stopping."
+    log "  No remaining tasks in plan.md."
+
+    # Run pentest verification if the script exists
+    if [ -x "$PROJECT_DIR/scripts/verify-pentest-fixes.sh" ]; then
+      section "RUNNING PENTEST VERIFICATION"
+      "$PROJECT_DIR/scripts/verify-pentest-fixes.sh" 2>&1 | tee -a "$LOG_FILE"
+      VERIFY_EXIT=$?
+      if [ "$VERIFY_EXIT" -eq 0 ]; then
+        log "  Verification PASSED — all checks green."
+      else
+        log "  Verification FAILED — some checks did not pass."
+        log "  Exit code: $VERIFY_EXIT"
+      fi
+    fi
     break
   fi