fix-release-pr

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested via GitHub API calls that fetch PR review comments and review thread bodies (e.g., gh api repos/ClickHouse/clickhouse-js/pulls/<N>/comments and GraphQL reviewThreads { ... comments { body } }), where the comment authors are not the operating user.