fix(decisions): redact private blocker codes in public comments

[JSONbored]

Motivation

• Prevent disclosure of private decision-pack blocker codes (e.g. open_pr_pressure, closed_pr_credibility, low_credibility) and related credibility/scoreability hints in public GitHub command comments.
• The existing sanitizer did not cover underscore-form blocker codes or rerun/credibility phrases, allowing private scoring context to be emitted.

Description

• Map known private decision-pack blocker codes to a generic, non-sensitive label in public lists by returning a short authenticated-view pointer from publicBlockerLabel in src/github/commands.ts instead of emitting the raw code.
• Replace occurrences of those private blocker codes in action details via publicBlockerDetail so they render as "private readiness context" rather than exposing internal codes.
• Extend sanitizePublicComment to redact underscore-form blocker codes and credibility/open-PR-pressure language and normalize other private phrases so public output no longer contains private scoring indicators.
• Update unit expectations in test/unit/github-commands.test.ts to assert private blocker codes and credibility details are not published and to expect the new generic pointer text.

Testing

• Ran npx vitest run test/unit/github-commands.test.ts --reporter verbose and all tests passed (16 passed).
• Ran npm run typecheck (tsc --noEmit) and the typecheck completed successfully.
• Verified formatting and diff checks with git diff --check which reported no issues.

---

Codex Task

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	gittensory-ui	70f9e96	Commit Preview URL Branch Preview URL	Jun 10 2026, 07:12 AM

[ghost]

Note

Gittensory Gate skipped

PR closed before full evaluation. No late first comment was created.

Signal	Result	Evidence	Action
Gate result	⚠️ Skipped	#500 is no longer open.	No action.

---

Checked by Gittensory, a quiet PR intelligence layer for OSS maintainers.

[superagent-security]

Superagent didn't find any vulnerabilities or security issues in this PR.