fix: Allow spaces in --disclosure-reporter CLI argument

The default value "Security Researcher" contains a space but the
validation regex rejected it. Widen the character class to accept spaces.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: devatsecure

scripts/hybrid/cli.py

@@ -259,7 +259,7 @@ def _resolve_flag(cli_val, env_key, config_key):
                 f"WARNING: --disclosure-repo must start with https:// or http://, got: {args.disclosure_repo!r}. Skipping."
             )
     if args.disclosure_reporter:
-        if re.fullmatch(r"[A-Za-z0-9@._-]+", args.disclosure_reporter):
+        if re.fullmatch(r"[A-Za-z0-9@._ -]+", args.disclosure_reporter):
             os.environ["DISCLOSURE_REPORTER"] = args.disclosure_reporter
         else:
             print(f"WARNING: --disclosure-reporter contains unsafe characters: {args.disclosure_reporter!r}. Skipping.")