feat: block dangerous scope keys and harden findScope (#898)

[harttle]

Summary

• Block proto, constructor, prototype in template reads
• sanitizeScope for managed scopes
• findScope respects ownPropertyOnly

Test plan

• npm test context.spec scope-security

Closes #898

Made with Cursor

[coveralls]

Coverage Report for CI Build 29426900249

Warning

No base build found for commit 61ed163 on next.
Coverage changes can't be calculated without a base build.
If a base build is processing, this comment will update automatically when it completes.

Coverage: 99.554%

Details

• Patch coverage: 18 of 18 lines across 2 files are fully covered (100%).

Uncovered Changes

No uncovered changes found.

Coverage Regressions

Requires a base build to compare against. How to fix this →

---

Coverage Stats

Relevant Lines:	2985
Covered Lines:	2976
Line Coverage:	99.7%
Relevant Branches:	1053
Covered Branches:	1044
Branch Coverage:	99.15%
Branches in Coverage %:	Yes
Coverage Strength:	18938.09 hits per line

---

💛 - Coveralls