fix(security): add CSRF protection, CORS whitelist, and security headers #3361

	on:
	pull_request:
	types: [opened, synchronize, reopened]
	branches:
	- '**'
	paths:
	- 'multimodal/**'
	- '.github/workflows/agent_tars_build.yml'

	permissions:
	id-token: write
	contents: read
	attestations: read

	name: Agent TARS Build
	concurrency:
	group: ${{ github.workflow }}-${{ github.ref }}-test
	cancel-in-progress: true
	env:
	CI: true
	NODE_OPTIONS: --max-old-space-size=8192
	HUSKY: 0

	jobs:
	multimodal_bootstrap:
	name: Agent TARS Build
	runs-on: ubuntu-latest

	steps:
	- uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
	- name: Install pnpm
	run: npm install -g pnpm@9
	- uses: actions/setup-node@6044e13b5dc448c55e2357c09f80417699197238 # v6.2.0
	with:
	node-version: 22
	cache: 'pnpm'
	cache-dependency-path: 'multimodal/pnpm-lock.yaml'
	- name: Install dependencies
	working-directory: ./multimodal
	run: pnpm install
	- name: Run Agent TARS Build
	working-directory: ./multimodal
	run: pnpm bootstrap
	- name: Run Agent TARS Test
	working-directory: ./multimodal
	run: pnpm test

Provide feedback