Include todo list in system prompt to survive condensation

[0xMink]

Summary

Fixes #11433

• Render the current todo list as a dedicated CURRENT TODO LIST section in the system prompt when todo items exist
• Wire todoList through both the task execution path (Task.ts) and webview prompt generator (generateSystemPrompt.ts)
• Sanitize todo content for table integrity: pipe escaping, newline normalization, whitespace collapse
• Treat todo entries as data (not instructions) to prevent prompt injection via crafted todo content

Test Plan

• Unit tests for formatTodoListSection (13 tests): empty/undefined handling, status mapping, pipe escaping, newline normalization, whitespace collapse, table structure
• Integration tests for SYSTEM_PROMPT (3 tests): section present with todos, absent when empty, absent when undefined
• All 27 tests passing
• No snapshot breakage

[roomote]

Rooviewer   See task

Reviewed changes since last review. Previous issue resolved, no new issues found.

• formatTodoListSection missing backslash escaping before pipe escaping (inconsistent with existing formatReminderSection pattern, can break table with \| in content)

Previous reviews

• 4b0c572: Review #1

_{Mention @roomote in a comment to request specific changes to this pull request or fix all unresolved issues.}

[roomote]

The sanitization chain escapes pipes but not pre-existing backslashes. The existing formatReminderSection in reminder.ts does .replace(/\\/g, "\\\\" ).replace(/\|/g, "\\|") -- backslashes first, then pipes. Without that first step here, content like foo\|bar produces foo\\|bar after pipe escaping, where \\ is an escaped backslash and | is a raw pipe that breaks the table structure.

Suggested change

	const normalizedContent = item.content
	.replace(/\r?\n/g, " ")
	.replace(/\|/g, "\\|")
	.replace(/\s+/g, " ")
	.trim()
	const normalizedContent = item.content
	.replace(/\r?\n/g, " ")
	.replace(/\\/g, "\\\\")
	.replace(/\|/g, "\\|")
	.replace(/\s+/g, " ")
	.trim()

_{Fix it with Roo Code or mention @roomote and request a fix.}

[0xMink]

Addressed roomote/CodeQL feedback: formatTodoListSection() now escapes backslashes before pipe-escaping (prevents \| from becoming a raw table pipe), matching the order used by formatReminderSection in reminder.ts. Includes a regression test covering that case. 28/28 tests passing.

[hannesrudolph]

Closing: PR lacks clear evidence of manual testing.