feat(intake-triage): pass only trusted comments to the model on a re-entry dispatch #802

Refs: melodic-software/claude-code-plugins#8489

Problem

When a trusted comment re-enters an issue into intake triage (claude-code-plugins intake-reenter.yml, dispatching intake-triage.yml), the triage run reads every comment on the issue (.github/workflows/intake-triage.yml here, around line 511 at f129f4c). Only the decision to re-enter is gated on trusted text, so any commenter can plant text that the triage model reads on each re-entry. The impact is bounded (allowlisted labels, mentions broken, no write tools, never agent-ready), and the caller records it as accepted exposure.

Proposed change

On a dispatch (re-entry), pass the triage model only comments from trusted actors (the same trusted-actor list select-trusted-text uses), or only the comment that triggered the re-entry plus the issue body.

Acceptance

• A re-entry dispatch gives the triage model no comment from an untrusted author.
• A first-time triage keeps its current input.

Found in a security pass on claude-code-plugins#8489 (P4).