GHSA-7qw2-f75v-62f7: Coder vulnerable to stored HTML injection via workspace agent logs in AgentLogLine component

Coder's AgentLogLine dashboard component failed to escape HTML characters before displaying workspace agent logs, allowing a workspace owner to inject arbitrary HTML that would render in other users' browsers when they viewed the workspace page. While a Content Security Policy blocked inline scripts, attackers could still inject redirects or CSS-based attacks.