migrate-to-openchoreo

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). Outsider-authored free text is ingested at runtime via the WebSocket event loop: browser interactions written into runs/<id>/state/events.jsonl by scripts/server.cjs (fed by the page UI that the agent serves, where only chat is “woken” into the next LLM turn).