Untrusted Git Filters RCE

A recurring security failure where repository-provided Git filter definitions (clean/smudge) are auto-enabled during clone, causing client-side command execution, so the fix is to distrust and require local, verified configuration.