ci-poller.yml attestation output sourcing

Trap: source "$attestation_output" looks convenient because GitHub output files use key=value lines, but it executes the attestation payload as shell code. Fix: read the known ci_ready_attestation value as literal data and validate its expected format; the proof is untrusted transport data until the validator checks its trusted comment author, title, event, and actor bindings.