gh-fix-ci

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The required runtime workflow runs scripts/inspect_pr_checks.py, which calls gh pr checks and then gh run view --log / gh api .../actions/jobs/<job_id>/logs, ingesting GitHub Actions log text (outsider-authored CI output from other users/commits) into the agent’s context via the produced failure snippets.