fix: address all HIGH-severity code quality audit findings

- lsp/server.go: track request goroutines in inflight WaitGroup to
  prevent use-after-close writes on shutdown
- lsp/llm_client_registry.go: acquire write lock before calling build()
  to eliminate TOCTOU race on cache population
- lsp/handlers_codeaction.go: resolveSimplifyCodeAction now uses
  PromptCodeActionSimplify{System,User} (was wrongly using rewrite prompts)
- askcli/taskexport.go: remove exported MustParseTaskExport to prevent
  panic on malformed external input; move to unexported test helper
- cmd/ask/main.go: print error to stderr before os.Exit
- llm/{openai,ollama,openrouter}.go: add interface satisfaction assertions
- integrationtests/ask_test.go: replace type assertions with errors.As
  for robust exec.ExitError unwrapping

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

1 files changed, 6 insertions, 0 deletions

diff --git a/internal/llm/openrouter.go b/internal/llm/openrouter.go
index 60a594a..451e9ad 100644
--- a/internal/llm/openrouter.go
+++ b/internal/llm/openrouter.go
@@ -21,6 +21,12 @@ type openRouterClient struct {
 	defaultTemperature *float64
 }
 
+// Ensure openRouterClient implements Client and Streamer.
+var (
+	_ Client   = openRouterClient{}
+	_ Streamer = openRouterClient{}
+)
+
 func init() {
 	RegisterProvider("openrouter", openRouterProviderFactory)
 }