ci(claude): bump ai-review-prompts pin to 53d4f501

[heskew]

Summary

Bumps all four caller workflow files to ai-review-prompts `53d4f501` (post-#15). Picks up:

• `claude-fix:test` label support — added to the issue-to-PR reusable's hard-coded `if:` JSON list and prompt label-scope guidance. Test work (write, migrate, refactor, stabilize tests) was the missing scope between `:bug` and the existing labels.
• FS primitives in the allowlist — `Bash(mkdir:)`, `Bash(mv:)`, `Bash(cp:)`, `Bash(ls:)`, `Bash(cat:)`. Surfaced when an `@claude` mention burned half its turn budget retrying `mkdir` against a denial. `Bash(git:)` was already in the allowlist (full namespace), so this isn't a meaningful security expansion.

All four callers move together to the same SHA, keeping the "all pin lines match" invariant easy to eyeball.

The `claude-fix:test` label has already been created on this repo (mirroring oauth / harper-pro: green `#0E8A16`, "Test work — write, migrate, refactor, or stabilize tests").

Test plan

• Caller-validator script (from ai-review-prompts main) dry-runs cleanly against the bumped tree.
• All four caller files now reference `53d4f5015c8bac691fa108c5c3d0440151bd66af` in both `uses:` and `with.ai-review-prompts-ref`.
• After merge: label a test issue with `claude-fix:test`; verify the issue-to-PR reusable picks up the new scope and the agent doesn't burn turns on `mkdir` denials.

🤖 Generated with Claude Code

[heskew]

Superseded — bumping to the post-#16/#17 SHA (f6daed30) instead, which also picks up the mention-FS primitives + add-only migration guidance. New PR coming.