[Fix] Automation labels show "Codeql Triage" instead of "CodeQL Triage"

[roomote-roomote]

Opened on behalf of Matt Rubens. Follow up by mentioning @roomote-roomote, in the web UI, or in Slack.

Related issue

Internal polish from Slack feedback (no tracked issue).

Why this PR exists

• A maintainer explicitly invited this PR in the linked issue or discussion
• I am a maintainer / this is internal Roomote work

What changed

formatAutomationLabel now spells the CodeQL brand correctly, so codeql_triage surfaces as CodeQL Triage (not Codeql Triage) anywhere automation keys are humanized (task filters, analytics labels, attribution).

Token overrides use a Map so unconstrained token lookups never accidentally pick up Object.prototype keys such as constructor or toString.

How it was tested

• Asserts formatAutomationLabel('codeql_triage') === 'CodeQL Triage'
• Asserts prototype keys title-case normally (constructor → Constructor)
• pnpm --filter @roomote/web exec vitest run src/lib/task-creator-filter.test.ts (12 passed)
• Pre-push suite (oxlint, residual lint, check-types:fast, knip) passed on push

Checklist

• The PR title follows the repo convention: [Fix], [Feat], [Improve], [Refactor], [Docs], or [Chore] followed by a user-facing description
• This PR is small and scoped to one change
• pnpm lint and pnpm check-types pass locally
• I added tests or included a clear manual validation note above
• I removed secrets, tokens, private keys, and customer data from code, logs, and screenshots
• If this change should appear in the changelog, I ran pnpm changeset

[roomote-roomote]

0 issues outstanding.

• packages/types/src/automation-label.ts:19 Use an own-property lookup for token overrides. Because word is unconstrained, inherited keys such as constructor and toString currently resolve to Object.prototype functions, so formatAutomationLabel('constructor') emits function Object() { [native code] } instead of Constructor. A Map or Object.hasOwn(AUTOMATION_LABEL_TOKEN_OVERRIDES, word) avoids treating prototype properties as overrides.

_{Reviewed 7afec2a · fixed in e8d5cc3}

[roomote-roomote]

Fixed the token-override review issue.

• Switched AUTOMATION_LABEL_TOKEN_OVERRIDES to a Map so only real brand tokens resolve, not Object.prototype keys
• Added regression coverage for constructor and toString
• Shipped in e8d5cc3

No review threads to resolve (finding was on the top-level summary only). Left CLA alone as requested.