Rescued the Rust SDK security hardening (the fixing agent died at the wall
before committing): validate the server-supplied since as a git object id
(hex, 1..=64) before it reaches 'git log <since>..HEAD' so it can never be
read as a flag/path (arg-injection); refuse HTTP redirects (.redirects(0),
no SSRF bounce); cap the response body at 8MiB (no hostile-server OOM).
13 tests green incl since_must_be_a_git_object_id.
Hanzo Dev
a83fb1dc7f