fix(github-app): avoid leaking cached contributor counts

[JSONbored]

Motivation

• A recent default to oss_maintainer + detected_contributors_only widened public outputs and allowed login-only cached D1 queries to surface aggregated PR/issue counts for non-confirmed contributors, causing potential information disclosure.
• The public PR panel and AI signal bundle should not reveal cached private/installation-scoped contributor activity unless the contributor is confirmed by the official Gittensor API.

Description

• Require confirmed official detection before treating detected_contributors_only as publishable by changing shouldPublishPrComment to accept a minerStatus parameter and only return true for that mode when minerStatus === "confirmed" (src/signals/settings-preview.ts).
• Prevent the live webhook path from loading login-only contributor caches for public comments by skipping listContributorPullRequests, listContributorIssues, and listContributorRepoStats except when the official snapshot confirms the contributor, and use contributorRepoStatsFromGittensor for authoritative repo stats (src/queue/processors.ts).
• Redact contributor context and prior counts in public deterministic comments and the AI signal bundle unless the detection source is official_gittensor_api, and label the panel as Public profile only when unconfirmed (src/signals/engine.ts).
• Update unit expectations to reflect the new gating and redaction behavior (test/unit/settings-preview.test.ts, test/unit/signals-coverage.test.ts).

Testing

• Type checking was run with npm run typecheck and completed without errors.
• Unit tests were run with npm run test:unit (and targeted vitest runs) and all unit tests passed.
• Focused vitest runs for test/unit/settings-preview.test.ts, test/unit/signals.test.ts, test/unit/signals-coverage.test.ts, test/unit/signals-v2.test.ts, and test/unit/queue.test.ts were executed and passed.

---

Codex Task

[cloudflare-workers-and-pages]

Deploying with    Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status	Name	Latest Commit	Preview URL	Updated (UTC)
✅ Deployment successful! View logs	gittensory-ui	7eacf3e	Commit Preview URL Branch Preview URL	Jun 05 2026, 11:13 PM

[gittensory]

Note

Gittensory Gate skipped

PR closed before full evaluation. No late first comment was created.

Signal	Result	Evidence	Action
Gate result	⚠️ Skipped	#414 is no longer open.	No action.

---

Checked by Gittensory, a quiet PR intelligence layer for OSS maintainers.