chore: drop review tags from comments

Comments, docstrings and test texts ended on tags that name private review notes no clone holds. The tags go, the facts stay. Test methods named after a finding number are named after what they hold. test_prose_style refuses a tag that comes back. install.py changes in comments only: its pin and the launcher index follow.

scripts/sitebootstrap.py

@@ -45,7 +45,7 @@ PIN: dict[str, re.Pattern[str]] = {
 # What the served copy says of a refused installer. It names a commit's
 # install.py, which never changes, and both downloaders fail on a short
 # transfer before the hash is read: neither a cut download nor caches of
-# two ages explain a mismatch there (code_audit_21 P3-1).
+# two ages explain a mismatch there.
 SERVED_ADVICE = ("The file was changed on its way here, most often by a proxy or an "
                  "antivirus that rewrites downloads. Run the command again from another "
                  "network, or with that web protection paused.")
@@ -73,7 +73,7 @@ def served_text(name: str, root: Path, commit: str) -> str:
     advice fitted to that. A pin that is not the SHA-256 of root's
     install.py stops the build: published, that copy refused every install
     until the next good deploy, where a failed build keeps the last good
-    pair served (code_audit_21 P3-2)."""
+    pair served."""
     source, line = SOURCES[name]
     text = (root / source).read_text(encoding="utf-8")
     pinned = PIN[name].findall(text)