manage-ci-artifacts

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). At runtime, the persist subcommand fetches CI job logs (outsider-authored text from GitHub/GitLab) via the plan-marshall:tools-integration-ci:ci fetch-logs abstraction and writes the resulting log content into .log files and manifest.toon, which are then available for later LLM context during retrospectives.