fix(plugin): load helpers with Python safe path

[mldangelo-oai]

Summary

Directly launching the publication and severity helpers with Python safe-path isolation fails before their help or command handling because sibling modules cannot be imported. Both helpers now load their canonical scripts directory, matching the existing standalone helper bootstrap.

Changes

• Bootstrap sibling imports in workbench_publication.py and workbench_severity.py.
• Exercise both helpers through real python -P --help subprocesses.

Testing

• On the final branch merged with main at 1345ea3f: Ruff lint/format, SDK build:ci, types, format, plugin bundle, portable source compatibility, and all nine compatibility checker tests passed.
• All five helper dry-run regressions, 212 preview/rank regressions, and all six UTF-8 artifact-export regressions passed.
• The complete Python suite passed with safe-path isolation on the preceding alpha.14 merge: 1,607 passed, six skipped, and 162 subtests. The subsequent preview and export changes received the focused checks above.
• Three fresh native Codex reviews and independent verification passed for the final head.
• git diff --check passed.

Risk and rollout

This follows the neighboring helpers' import bootstrap and preserves command arguments, diagnostic output, and business behavior. No public CLI API changes or migration are required.

Public disclosure review

• No customer, partner, prospect, or user identities, data, or identifying details are included.
• No credentials, personal data, private source, scan findings, or nonpublic links or tickets are included.
• I reviewed the branch name, title, description, commits, changes, comments, logs, screenshots, attachments, and links for public disclosure.

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-10-05T15:31:25.624021Z	2dcf46f	New commits
🔒 Security Review	✅ Completed 2026-10-05T15:32:28.095304Z	2dcf46f	New commits

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[alandelong-oai]

Reviewed the full contribution at 2dcf46fafc66ae79990a61dbdccc60397e382203 with selected base 1345ea3fa48021ef54ecc2dcc948fde43fec8d0c, including changed tests and touched context, using three independent reviews followed by root synthesis.

No supported introduced finding.

Static source review; tests were inspected but not executed. CI, mergeability and integration are separate.