Catch MCP Tool-Poisoning and Prompt-Injection Regressions on Every PR (GitHub Actions + pre-commit)

A working walkthrough of wiring sentinel-scan-cli into GitHub Actions and pre-commit as a CI gate...