Show patched versions and preserve pull request context

[lelia]

Summary

• show API-provided patched versions in console security findings and existing GitHub/GitLab comments
• detect pull request context in supported CI environments and propagate it into scan metadata
• improve Buildkite and CI documentation for pull request association
• bump the CLI version to 2.6.5

Notes

Patched-version output is available whenever an alert includes firstPatchedVersionIdentifier; findings without that value remain blank.

The CLI now sends detected pull request URLs with diff-scan creation. A backend follow-up should be linked here once filed to track reliable persistence and Dashboard rendering of that metadata.

Testing

• 459 passed, 2 skipped
• Ruff checks for changed and new feature files
• lockfile and version consistency checks
• wheel and source distribution builds
• Twine package validation

Refs CE-337.