Report vulnerabilities privately through GitHub security advisories.

This extension runs with the Pi process's permissions. It resolves target-provider credentials through Pi and removes caller credential headers before failover. Never include secrets in alias configuration, issue reports, or debug logs.