ci: prevent injection in presubmit (#66) · renovate-bot/gemini-cli-extensions-_-cloud-sql-postgresql@b4e9440