cut-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.85). Phase 1 runs scripts/list-changes-since-tag.sh, which uses gh pr view to fetch outsider-authored PR metadata (e.g., PR titles/authors/labels and file paths) and emits it as JSON on stdout that cut-release then loads into the LLM context for Phase 2/3 sanitization.