v1.7.12026-03-24

CI pipeline fixes: Semgrep, dependency audit & SBOM generation

Fix 3 CI blockers preventing the merge gate from passing: Semgrep expression injection finding in auto-translate workflow, high-severity flatted vulnerability via pnpm override, and SBOM generation using pnpm-compatible CycloneDX generator.

Fixed3

Fix Semgrep SAST finding: pass workflow_dispatch input via env var instead of direct expression interpolation in auto-translate.yml
Fix dependency audit: override flatted >=3.4.2 to resolve 2 high-severity prototype pollution vulnerabilities
Fix SBOM generation: use @cyclonedx/cyclonedx-pnpm instead of @cyclonedx/cyclonedx-npm for pnpm compatibility