fix: enforce original deployment identity in auto-remediation to prevent cross-namespace mutation via prompt injection