Linear-time output scanning

A hardening fix: Dino's output leak-check now runs in guaranteed linear time, closing a potential ReDoS flagged by CodeQL.

Before Dino prints a report, it scans its own output for leaked log lines. 1.0.4 rewrites the pattern behind that check as two linear matchers, so crafted input can no longer force super-linear backtracking. This closes a denial-of-service class (ReDoS) flagged by CodeQL.

Upgrade with npm install -g @dino-hq/cli@latest.

Your reports are unchanged. This is purely a safety and performance hardening of the output pipeline, with a regression test that pins the check to linear time.