pr-watch-fix

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The skill reads CI failure information and logs from GitHub PR checks/runs via gh pr checks ... and gh run view ... --log-failed, where the failing job output is ultimately outsider-authored (i.e., produced by code/tests/linters from the PR authors) and is ingested for diagnosis.