Gemini Cli, 1 enabled RCE in CI workflows, forcing Google to mandate explicit workspace trust.