fix: reject program_path="." to prevent scanning entire repos directory

When manifest entries have program_path set to "." (1189 of 1635),
the fix scripts were scanning the current working directory instead
of the target repo. Now falls back to REPOS_BASE/repo for "." paths.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

Author: Jonathan D.A. Jewell

scripts/dispatch-runner.sh

@@ -166,8 +166,9 @@ execute_entry() {
     program_path=$(echo "$entry" | jq -r '.program_path // ""')
 
     # Resolve repo path: prefer program_path from manifest, fall back to REPOS_BASE/repo
+    # Never use "." as program_path — that would scan the entire working directory
     local repo_path=""
-    if [[ -n "$program_path" && -d "$program_path" ]]; then
+    if [[ -n "$program_path" && "$program_path" != "." && "$program_path" != "./" && -d "$program_path" ]]; then
         repo_path="$program_path"
     else
         # Validate repo name (prevent directory traversal)