fix: land nine small correctness fixes (#100204) #117

Job	Run time
Security High (plugin-trust-boundary)	1m 19s
Security High (actions)	1m 21s
Security High (mcp-process-tool-boundary)	1m 17s
Security High (channel-runtime-boundary)	1m 15s
Security High (process-exec-boundary)	2m 34s
Security High (core-auth-secrets)	1m 11s
Security High (network-ssrf-boundary)	1m 9s
	10m 6s

Provide feedback