Fix template injection vulnerabilities in repository metadata fields

- Move github.repository to REPO_NAME env variable in git config step
- Move github.event.repository.default_branch to DEFAULT_BRANCH env variable in git patch step
- Update test expectations to match new env block structure
- Recompile all affected workflows with secure environment-based approach

Co-authored-by: pelikhan <[email protected]>

Author: Copilot