fix(handoff): fail content guard lint on injection warnings #1096

Job	Run time
install-from-source (repo+codex, --depth repo --harnesses codex)	24s
content-guard	8s
install-from-source (workspace+hermes, --depth workspace --harnesses hermes)	20s
lint	21s
test (3.10)	11m 35s
windows-native-acceptance	55s
changes	8s
install-from-source (workspace+codex+openclaw, --depth workspace --harnesses codex,openclaw)	23s
component-manifest-provenance	17s
install-from-source (repo+claude, --depth repo --harnesses claude)	19s
install-from-source (repo+claude+publisher, --depth repo --harnesses claude --include publisher)	18s
install-from-source (workspace+claude+openclaw, --depth workspace --harnesses claude,openclaw)	21s
install-from-source (workspace+none, --depth workspace --harnesses none)	16s
test (3.11)	7m 1s
test (3.12)	14m 21s
quickstart-smoke (windows-latest)	56s
install-from-source (kitchen-sink, --depth workspace --harnesses claude,codex,openclaw,hermes)	19s
quickstart-smoke (ubuntu-latest)	20s
repo-metadata	15s
quickstart-smoke (macos-latest)	24s
notify-build-and-test (windows-latest)	0s
Windows (stable, default features)	0s
evidence-ledger-test	0s
MSRV (Rust 1.85)	0s
notify-build-and-test (ubuntu-latest)	0s
Feature configuration (${{ matrix.name }})	0s
build-and-test	0s
	39m 21s

Provide feedback