fix: return 'Unknown' as primary_language when directory has no Python files

fix: suppress bandit B110 and B404 warnings in file_scanner and sandbox

fix: correct sandbox process cast and scan_repository return type to dict

fix: resolve mypy errors in sandbox.py and file_scanner.py

infra(terraform): add EKS cluster, Elasticache Redis, and ECR modules for cloud deployment

security: harden prompt injection defense with XML delimiters and injection pattern stripping

fix: add missing file_list param to read_source_samples and wire changed_files through

fix: feat: fault-tolerant parallel agents, AST security scanner, and shared source reader

fixed lint

security: sanitize file content before LLM injection to mitigate prompt injection attacks

fix: log warnings instead of silently swallowing file read errors in agents and scanner

fix

fix: suppress remaining bandit warnings with nosec comments

feat: add all tools - github, scanner, ast, pytest, static analyzer