fix: harden manifest parse boundaries#922

mldangelo-oai merged 3 commits intomainpromptfoo/modelaudit:mainfrom

mdangelo/codex/manifest-boundary-auditpromptfoo/modelaudit:mdangelo/codex/manifest-boundary-auditCopy head branch name to clipboard