ci: prevent injection in presubmit (#61) · renovate-bot/gemini-cli-extensions-_-cloud-sql-sqlserver@41e4fae