Retrieval-Augmented Few-Shot Prompting Versus Fine-Tuning for Code Vulnerability Detection