Fixes #1696 The gsd-prompt-guard.js hook was missing the 'act as a/an/the' prompt injection pattern that security.cjs includes. Adds the pattern with the same (?!plan|phase|wave) negative lookahead exception to allow legitimate GSD workflow references.