❌ This PR requires approval from a maintainer (imran-siddique, microsoft-github-policy-service) before merge. AI and bot approvals do not satisfy this requirement. This policy exists because PRs #357/#362 reintroduced security vulnerabilities when auto-merged without human review.