Multi-pass code review workflow: structural analysis, security scan, performance review, and prioritized fix list with diffs.