Two-phase DAST dedup: exact fingerprint match (title+endpoint+method)
and CWE-based related finding merge (e.g., HSTS reported as both
security_header_missing and tls_misconfiguration). Applied at insertion
time in the pentest orchestrator and at report export.
PR review comments now include fingerprints and skip duplicates within
the same review run.
Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>
