[VULN-16] Git Clone Without Limits/Timeout

[lyncmi07]

Severity: High
Affected location: git_ops.ts:48

Issue:
git clone runs without depth, size guard, or timeout, allowing oversized repository abuse and resource exhaustion.

Mitigation plan:

1. Add shallow clone (--depth 1).
2. Apply operation timeout and kill stalled clone processes.
3. Add disk quota checks before/after clone.
4. Restrict allowed git hosts if feasible.

Verification / tests:

• Integration test for timeout behavior on slow/large clone.
• Test shallow clone still supports expected site workflow.