fix(review): redact duplicate surface summaries

[JSONbored]

Motivation

• Prevent leaking unvalidated, attacker-controlled duplicate entry fields (notably url) into public gate/finding text before the normal secret and URL validation steps run.
• Address the vulnerability where duplicate-detection returned a summary containing raw url content which could include PAT-like tokens, wallet/hotkey text, newlines, or Markdown.

Description

• Replace the duplicate-entry close summary to be fully generic and remove interpolation of the duplicate entry's url so duplicate detection no longer echoes unvalidated content.
• Stop passing the duplicate entry into the summary generator and instead return the stable generic message from duplicateEntryCloseSummary() in src/review/content-lane/orchestrator.ts.
• Update unit tests in test/unit/content-lane-orchestrator.test.ts to assert the generic close summary for same-PR and base-resubmission duplicates.
• Add a regression test that constructs an unsafe duplicate url (PAT-like token + newline + Markdown) and asserts it is not reflected in the returned summary.

Testing

• Ran git diff --check which reported no whitespace/conflict issues.
• Ran the targeted unit file with npx vitest run test/unit/content-lane-orchestrator.test.ts --reporter=dot and the test file passed (all tests in that file succeeded).
• Ran typecheck via npm run typecheck which succeeded.
• Attempted a repository-wide coverage run with npm run test:coverage, which executed but failed the global coverage threshold (the project-level coverage requirement prevented the run from passing in this environment).

---

Codex Task

[loopover-orb]

Important

🟪🟪🟪🟪🟪🟪🟪🟪🟪🟪🟪🟪

🔍 Gittensory is reviewing…

AI analysis is in progress. This comment will update when the review is complete.

_{🟩 Safe / merged · 🟦 Advisory · 🟨 Held for review · 🟥 Blocked / closed · 🟪 Reviewing}

[JSONbored]

False positive re: secret flag, merging.

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	gittensory-ui	2d8a2d7	Commit Preview URL Branch Preview URL	Jul 02 2026, 05:42 AM

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 95.95%. Comparing base (4101ca6) to head (f11f5ae).
⚠️ Report is 39 commits behind head on main.
✅ All tests successful. No failed tests found.

Additional details and impacted files

@@           Coverage Diff           @@
##             main    #2475   +/-   ##
=======================================
  Coverage   95.94%   95.95%           
=======================================
  Files         226      226           
  Lines       25361    25385   +24     
  Branches     9229     9233    +4     
=======================================
+ Hits        24333    24357   +24     
  Misses        417      417           
  Partials      611      611           

Files with missing lines	Coverage Δ
src/review/content-lane/orchestrator.ts	100.00% <100.00%> (ø)

🚀 New features to boost your workflow:

• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.