Fixed
- Tag stripping in summaries now runs to a fixpoint, so overlapping constructs
like<<script>script>can no longer reassemble into markup
(CodeQLjs/incomplete-multi-character-sanitization). Defense-in-depth: the
output is plain text, but an MCP client rendering results as markdown could
have interpreted leftover HTML.