Harden CI quota, preview trust, action archives, cache quota and log masking (CI-P1..P11)
Hold each cloud job's timeout on its runner-size meter before claiming a slot, base preview-site admin trust on the SHA's pusher, keep merge-queue refs out of site deploys, cap action archive size and tree walks, re-check the cache quota after eviction, mask secrets split across self-hosted log chunks and in encoded forms, run git tasks on their own container class, and requeue merge fixes only for appliers with base write.
22 files changed+400−20
Rendering diff…