Improve PR lens migration safety coverage

[haasonsaas]

Summary

• Broaden the stable evalops-pr-lens/migration-safety lens to cover stateful Terraform, startup-script, disk/cache, and one-time cleanup rollout risks.
• Add prompt coverage tests so infra migration risks stay in scope without adding another check ID.

Test plan

• ruby -c .github/scripts/evalops-pr-lens-review.rb
• ruby -Itest -e 'ARGV.each { |path| require "./#{path}" }' test/*_test.rb\n- git diff --check\n- actionlint .github/workflows/evalops-pr-lens-review.yml

[cursor]

PR Summary

Low Risk
Low risk: only adjusts the migration-safety lens prompt text and adds a unit test to lock in the broader wording; no runtime logic changes beyond prompt content.

Overview
Broadens the migration-safety PR lens prompt to explicitly include stateful infrastructure rollout risks (e.g., Terraform, startup scripts, disk/cache migrations, one-time cleanup, and destructive cloud/filesystem operations) alongside database migration concerns.

Adds a targeted test ensuring the generated prompt for the migration-safety lens contains the new infra-focused guidance so this scope doesn’t regress.

^{Reviewed by Cursor Bugbot for commit 44bbfa9. Bugbot is set up for automated code reviews on this repo. Configure here.}