fix: address Greptile review — JSON injection, close-pr-message, exempt labels

- Fix JSON injection in Slack payload — build message in run step
  to avoid malformed JSON from release names with quotes
- Add close-pr-message for stale PRs — contributors get context
- Add bug to exempt-pr-labels — match issue exemptions

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: abhizipstack

.github/workflows/release-notification.yml

@@ -9,12 +9,20 @@ jobs:
     runs-on: ubuntu-latest
     if: ${{ secrets.SLACK_WEBHOOK_URL != '' }}
     steps:
+      - name: Build Slack message
+        id: message
+        run: |
+          TAG="${{ github.event.release.tag_name }}"
+          NAME=$(echo '${{ toJSON(github.event.release.name) }}' | jq -r '.')
+          URL="${{ github.event.release.html_url }}"
+          echo "text=🚀 *Visitran ${TAG}* released! ${NAME} <${URL}|View Release Notes>" >> "$GITHUB_OUTPUT"
+
       - name: Post to Slack
         uses: slackapi/slack-github-action@v2.1.0
         with:
           webhook: ${{ secrets.SLACK_WEBHOOK_URL }}
           webhook-type: incoming-webhook
           payload: |
             {
-              "text": "🚀 *Visitran ${{ github.event.release.tag_name }}* released!\n\n${{ github.event.release.name }}\n\n<${{ github.event.release.html_url }}|View Release Notes>"
+              "text": "${{ steps.message.outputs.text }}"
             }

.github/workflows/stale.yml

@@ -27,10 +27,13 @@ jobs:
           close-issue-message: >
             This issue was closed because it has been inactive for
             too long. Feel free to reopen if it is still relevant.
+          close-pr-message: >
+            This pull request was closed because it has been inactive
+            for too long. Feel free to reopen if it is still relevant.
           stale-issue-label: "stale"
           stale-pr-label: "stale"
           days-before-stale: 60
           days-before-close: 7
           exempt-issue-labels: "pinned,security,bug"
-          exempt-pr-labels: "pinned,security"
+          exempt-pr-labels: "pinned,security,bug"
           exempt-all-milestones: true