minor-release

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The runtime LLM context is fed by the user-provided “highlights” free text from stdin in write-minor-changelog-section.ts (the script reads stdin and embeds it verbatim into the composed changelog section), which is outsider-authored unless the operating user is the one providing it.