fix(ci): resolve lint errors (useless-escape, prefer-const, unused param)

packages/core/src/redact-secrets.ts

@@ -23,7 +23,7 @@ export function redactSecrets(text: string): string {
         "$1$2[REDACTED]$2",
       )
       // sk-/ghp_/github_pat_/xoxb-/AKIA-style long opaque tokens
-      .replace(/\b(sk-|ghp_|gho_|github_pat_|xox[abpr]-|AKIA)[A-Za-z0-9_\-]{8,}/g, "[REDACTED]")
+      .replace(/\b(sk-|ghp_|gho_|github_pat_|xox[abpr]-|AKIA)[A-Za-z0-9_-]{8,}/g, "[REDACTED]")
       // standalone long base64/hex secrets (>=32 chars)
       .replace(/\b[A-Za-z0-9+/]{40,}={0,2}\b/g, "[REDACTED]")
       .replace(/\b[0-9a-fA-F]{32,}\b/g, "[REDACTED]")

packages/dashboard/app/components/SettingsModal.tsx

@@ -446,7 +446,7 @@ interface CliAgentSettingsEntry {
  * confirmation flow before the per-project approval is granted.
  */
 function CliAgentsSettingsSection({
-  projectId,
+  projectId: _projectId,
   addToast,
 }: {
   projectId?: string;

packages/dashboard/src/cli-session-output-filter.ts

@@ -144,7 +144,7 @@ function isForgingQueryCsi(seq: string): boolean {
  * shared state.
  */
 export function neutralizeTerminalOutput(chunk: string, carry = ""): NeutralizeResult {
-  let input = carry + chunk;
+  const input = carry + chunk;
   let out = "";
   let i = 0;