[Security] Security issue in your GitHub CI workflow YAML files

[cicd-security]

Hello maintainers,

I would like to report a potential vulnerability in your GitHub CI workflows.

Affected files:

• johnwhobbs/AstroFileManager/.github/workflows/claude-code-fix.yml

Vulnerability:

• In job 'claude-fix', step 'Commit changes', the attacker-controlled 'github.event.issue.title' is spliced into the run shell command, enabling direct command execution.
• In job 'claude-fix', step 'Create Pull Request', the attacker-controlled 'github.event.issue.title' is spliced into the run shell command, enabling direct command execution.

Thank you for your time and for maintaining this project.