GHSA-gx45-xrj5-g6c4: CodeWhale: Project config `allow_shell` override enables arbitrary shell command execution via cloned repository

CodeWhale versions before 0.8.64 have a vulnerability where a malicious config file (`.codewhale/config.toml`) in a cloned repository can secretly enable the `allow_shell` setting, giving an AI model the ability to run arbitrary shell commands on a user's computer without their knowledge. This bypasses the security boundary that `allow_shell` was designed to protect, since the setting can be enabled by repository maintainers without the user explicitly opting in.