Harden untrusted input and sensitive data handling

[brucehart]

Summary

• Fix seven security findings involving external blob paths, sensitive-data remnants, plugin execution, vulnerable dependencies, replay redirects, compressed HAR expansion, and CSV formula injection.

Changes

• Deny external blob reads and deletions by default, with canonical root confinement when explicitly enabled.
• Copy SQLite databases through the online backup API and securely remove orphaned blobs, free-page data, and WAL remnants after redaction or PII rewriting.
• Require explicit --plugin authorization for configured executables and disable automatic replay redirects.
• Cap decompressed HAR input at 512 MiB, bound asynchronous read-ahead, and neutralize formula-leading CSV fields.
• Upgrade vulnerable Rust dependencies, adapt Parquet export to the current writer API, and add all-feature CI plus dependency auditing.
• Add exploit-focused regression tests and update CLI documentation.

Testing

• cargo test --all-features --locked passed: 60 library tests, 60 binary tests, and 76 integration tests.
• cargo audit reported zero known vulnerabilities; three informational unmaintained-package warnings remain.
• cargo clippy --all-features --all-targets --locked completed successfully with existing non-blocking warnings.
• git diff --check passed.

Notes

• Configured plugins now require --plugin <name> on every run.
• Replay no longer follows redirects automatically.
• External bodies require --allow-external-paths and can be confined with --external-path-root.

[brucehart]

@codex review

[chatgpt-codex-connector]

💡 Codex Review

Here are some automated review suggestions for this pull request.

Reviewed commit: 935ab6c5da

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[brucehart]

Addressed the actionable P2 review feedback in stacked PR #128: #128

The fix removes matching graphql_fields rows before deleting their parent entries under foreign-key enforcement, retains compatibility with databases without that table, and adds a regression test. Validation: cargo test --all-features --locked (196 tests passed) and git diff --check.