v1.14.0

Changelog

• e799080 feat(cli): bind the sandbox rerun executor to review.sandbox_command
• 833c18e feat(cli): never execute repo code from the mcp and guard paths
• 547eb63 feat(cli): render and run the configured sandbox command
• 5cb01c8 feat(config): add review.sandbox_command
• 6b82196 feat(flaky): resolve the enclosing test name for a finding
• d0c7965 fix(cli): classify a sandbox rerun timeout as unobserved, not failed
• f00eb14 fix(flaky): guard EnclosingTest on the _test.go suffix
• c47dbe0 fix(flaky): reject test names from files the toolchain never compiles
• b457af8 fix(flaky): resolve two guess bugs in EnclosingTest
• ba9f99a fix(flaky): strip comments/strings before brace counting and header matching
• 255883d refactor(flaky): rewrite EnclosingTest on go/parser, Go-only
• a56c4ab refactor(flaky): widen the rerun Executor seam to a Target struct