fix: imported safe-output fragments no longer override explicit threat-detection: false
#18231
+111
−2
threat-detection: false
#18231