AI tools for “cd”

…GitHub Actions workflows and composite actions for CI/CD supply-chain and injection risks (actions not pinned to a commit SHA, missing or write-all GITHUB_TOKEN permissions, pull_request_target "pwn request"…

…Supabase, Firebase, OpenAI and other LLM APIs, databases, CDNs) by analyzing billing exports and infrastructure code, then ranks savings by dollars and effort with exact fixes and risks. Use when the user asks to…