Further review fixes:
- Normalize the framework-injected --format to its canonical lowercase and
write it back to the runtime context and the cobra flag, so shortcuts that
branch on the exact value (e.g. Format == "pretty") behave correctly for
mixed-case input like --format Pretty, which previously slipped past those
checks and produced empty output.
- Size the pretty rendered-text scan window to the content-safety scanner's
native 128 KiB per-string capacity (was 64 KiB) so the windowing is no more
restrictive than scanning the raw value; keep the 4 KiB overlap for matches
crossing a window boundary.
d668d754d5