Harden fixer paths, modifications, disabling, and commits

[coderabbitai]

Harden automated fixes against traversal and symlink escapes, implement safe workflow disabling, preserve CRLF and regex replacement semantics, and refuse commits over staged changes. Document escaped-colon syntax and add comprehensive fixer coverage. Validation was not run.

View coding task

[coderabbitai]

Important

Review skipped

This PR was authored by the user configured for CodeRabbit reviews. CodeRabbit does not review PRs authored by this user. It's recommended to use a dedicated user account to post CodeRabbit review feedback.

⚙️ Run configuration

Configuration used: Organization UI

Review profile: ASSERTIVE

Plan: Essentials

Run ID: aeb69875-8cb9-416c-84d7-5c1e8f17fbe4

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

---

_{Comment @coderabbitai help to get the list of available commands.}