chore(main): release 0.46.0

[github-actions]

🤖 I have created a release beep boop

0.46.0 (2026-07-30)

Features

• compile: adopt AWF strict network isolation (#1534) (8fad0ab)
• compile: configure threat detection (#1716) (b51758d)
• prompts: add pull request prompt evaluation (#1710) (08807f5)
• smoke: run agentic smoke against compiler candidates (#1628) (0ad3d22)

Bug Fixes

• ado-script: recover shallow Azure checkout merge bases (#1563) (a59eda0)
• compile: add Build.BuildId to PROMPT_ADO_VARS for prompt substitution (#1725) (120f660)
• compile: reacquire SC_WRITE_TOKEN in Conclusion job (#1689) (316de97)
• executor-e2e: invoke .js test fixture via process.execPath on Windows (#1616) (5ad7f63)
• prompts: enforce consent-gated issue filing in debug prompt v2 (#1687) (741c830)
• test: retire missing candidate janitor definition (#1715) (e7f042a)
• tests: prepare AgentPlayground CI cutover (#1560) (b73183a)
• trigger-e2e: mint victim cancellation token (#1599) (f32f86f)
• trigger-e2e: preserve mirror push diagnostics (#1601) (ab2d2b8)
• trigger-e2e: stabilize and parallelize victim scenarios (#1595) (05ce3f9)
• workflows: allow bash auditor to update agentic pipeline (#1713) (49be01b)
• workflows: harden recurring agentic incidents (#1529) (5001f4a)

---

This PR was generated with Release Please. See documentation.

[github-actions]

🤖 Created releases:

• v0.46.0

🌻