[Sync] Update project files from source repository (e42f680)

[mrz1836]

What Changed

• Added new esc_html() bash function in .github/actions/validate-test-results/action.yml that escapes HTML metacharacters (&, <, >) in addition to stripping backticks and control characters
• Updated TEST_LABEL, TEST, PKG, and FAIL_TYPE variables to use esc_html() instead of strip_bt() for values written into raw HTML portions of GitHub step summary
• Retained strip_bt() for ERROR_MSG, OUTPUT, and STACK variables that are embedded in markdown code spans/fences where HTML is not interpreted
• Modified version references in .github/env/10-security.env, .github/env/10-mage-x.env, .github/env/00-core.env, and .github/workflows/fortress.yml

Why It Was Necessary

• Prevents crafted artifact-derived values (e.g., malicious subtest names) from breaking out of HTML tags and spoofing the rendered structure in GitHub step summaries
• Addresses a security vulnerability where unescaped HTML metacharacters in test names or package names could close tags early and manipulate the CI output display
• Applies defense-in-depth by using appropriate escaping based on context: HTML entity encoding for raw HTML sections, backtick stripping for markdown code blocks

Testing Performed

• Validated that the new esc_html() function correctly escapes &, <, and > characters while preserving the existing strip_bt() behavior for backticks and control characters
• Verified that test labels, test names, package names, and failure types are properly sanitized when rendered in GitHub step summaries
• Confirmed that error messages, output, and stack traces remain correctly formatted within markdown code spans without double-encoding

Impact / Risk

• Security Impact: Mitigates HTML injection risk in CI output rendering for artifact-derived content
• Breaking Change: None - this is purely a security hardening measure that affects output formatting only
• Risk: Low - changes are isolated to display formatting and do not affect test execution or result interpretation

[mrz1836]

LGTM!