## Summary

Brief description of what changed and why.

## Motivation

Why is this change needed? Link to related issues if applicable.

## Test plan

How was this tested?

- [ ] Unit tests added/updated
- [ ] `pytest -v` passes
- [ ] Self-scan passes: `agent-audit-kit scan . --fail-on critical`

## Checklist

- [ ] Tests pass locally
- [ ] No secrets or credentials committed
- [ ] Documentation updated (if applicable)
- [ ] CHANGELOG.md updated (if user-facing change)
