Common machine Git publisher v2 candidate

RESULT=PASS_COMMON_MACHINE_GIT_BUILDER_V2_CANDIDATE

PACKAGE_ID=20260713-072058_machine_git_builder_v2

ENGINE_V1_SHA256=de795151f06b8ab7ba7c921e0260332ad27b715b597a4fe81af9998f26e262f2
ENGINE_V2_SHA256=0367907663f124316e7702ae7920ffe45f564e873e43bf47c96a118e9f7ccd74
CLASSIFICATION_SHA256=353d7517ff9831c648f435829acb580151f6f1fbf8bb54296990814dfe48afdf
REPORT_SHA256=69e5bf07821ae37578fbcba41ce17eaf7f93d666c9b2f90da4b356265abe39f6

Regression proof:
- engine v1 reproduced the false positive
- engine v2 accepted dynamic environment access
- engine v2 blocked a synthetic hardcoded literal
- private-key, WireGuard-key, GitHub-token and JWT guards remain

The correction is common to VM100, VM101 and VM121.
No machine-specific bypass was introduced.

VM100_MODIFIED=false
VM101_MODIFIED=false
VM121_MODIFIED=false