Update Managed Files

[ChiaAutomation]

Note

High Risk
Changes supply-chain security controls, CI job isolation, and how malware/agent verdicts are trusted and posted on dependency PRs.

Overview
Dependency Cursor Review is restructured into scan → agent → verdict jobs on separate runners so only the scan job seals the malware report and only the verdict job posts comments; the agent runs without GITHUB_TOKEN and cannot combine or publish verdicts directly.

Trusted execution improves: trusted-git-path-checkout can extract default-branch files into dest (via git archive), validates manifest paths from FETCH_HEAD, and blocks path traversal; workflow scripts run from RUNNER_TEMP instead of the PR head, and combine strips PR .github/scripts from sys.path.

Malware scanning now materializes upstream blobs at the resolved to-ref (not the default-branch working tree), emits scan_conclusive / not_scanned / coverage metadata, fail-closes on missing tools or bad IOC config, and detects MALWARE_REVIEW_VERDICT tokens in scanned content. upstream_release_checkout.sh detaches upstream at the release and strips agent-instruction files (or removes the tree when unresolved).

Verdict handling replaces the multi-module prose parser with a strict first-line MALWARE_REVIEW_VERDICT: benign|malicious contract; combine only trusts agent output when the scan report SHA256 matches and the report is a conclusive clean scan—otherwise it publishes fixed inconclusive/withheld text. PR comments use the scan job’s summary from workflow outputs.

Dependabot adds the chia-pypi private index for pip updates.

^{Reviewed by Cursor Bugbot for commit 1a6752c. Bugbot is set up for automated code reviews on this repo. Configure here.}