feature-flag-test-harness

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). The runtime CI workflow reads outsider-authored YAML from the repository path tests/flag-matrix.yaml to generate FLAGS_JSON (which the tests then consume), so free text can be submitted by a PR author into that monitored input path.