The WASM guard (lib.rs:939) panics on `&output_json[..500]` when the
serialized output contains CJK characters at the byte boundary. This
poisons the guard for the entire session.
- Flip call order: get_files first (ASCII-dominant response), get second
- Add fallback: curl GitHub API when MCP server dies
- Narrow bash restriction: allow read-only shell for data retrieval
- Recompile lock file
Liet Blue