Heimdallr: Characterizing and Detecting LLM-Induced Security Risks in GitHub CI Workflows (ArXiv cs.CR Recent Papers, 2026)