Security: push_files tool lacks scope constraints enabling prompt injection → arbitrary repo write

Security: push_files tool lacks scope constraints enabling prompt injection → arbitrary repo write #674