fix-github-ci

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Outsider-authored free text is ingested when the script runs gh run view <run_id> --log (and, if needed, gh api /repos/<owner>/<repo>/actions/jobs/<job_id>/logs), which returns GitHub Actions job log text produced by external CI steps/maintainers, and that log text is then embedded into the agent context via the rendered “Failure snippet”/tail output.