fix-ci

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.75). The workflow uses gh pr checks / gh run view <run-id> --log-failed to ingest GitHub Actions logs for a PR, which are outsider-authored free text when the PR (and its CI output) originates from other contributors; this log text is then read by the agent’s LLM during failure analysis.