subagent 1 A subagent merged a PR under my name — permissions you shouldn't give an agent Jun 23, 2026