Workspace Trust Validation for OpenTelemetry Helpers

What changed: OpenTelemetry headers from project/local settings now require workspace trust Why it matters: Prevents arbitrary code execution from untrusted project configurations Details:

• New function CZ1() at line 371858 detects if otelHeadersHelper comes from project/local settings
• Function ph2() at line 371865 checks workspace trust via mx(!0) before executing helpers
• Returns empty headers instead of executing untrusted code
• Part of broader security hardening effort
• Evidence: Replaces simpler bh2() at line 371852 in v1.0.112