fix(hooks): assert the full feedback URL in test_fires_on_turn_10 — kills CodeQL py/incomplete-url-substring-sanitization high alert (substring github.com looked like URL validation to the scanner; full-URL assert is also the stricter test)

src/aipass/hooks/tests/test_feedback_pulse.py

@@ -53,7 +53,7 @@ class TestFeedbackPulseHandler:
                 result = self._handler()({"session_id": "test-fire"})
 
         assert "feedback" in result["stdout"].lower()
-        assert "github.com" in result["stdout"]
+        assert "https://github.com/AIOSAI/AIPass/issues" in result["stdout"]
 
     def test_fires_on_turn_20(self, tmp_path):
         result = {"stdout": "", "exit_code": 0}