token-list

Security review of open token-list PRs. Verifies SAC derivation, issuer home_domain, Horizon records, icon, and file placement; flags non-SAC (WASM) tokens and unlocked issuer accounts as red flags; posts a "Claude Opinion" comment on each PR. Use when asked to review, audit, or give an opinion on token-list pull requests.