ci-cd 3 shadow ai is now part of the ci/cd threat model Aug 9, 2026 GitHub Actions is becoming the agent runtime Jun 13, 2026 prompts are becoming CI/CD configuration Jun 12, 2026