Trivial whitespace change to test the backport workflow improvements
from PR #2940 (copySourcePRLabels, sourcePRLabels, and automatic
backport-pending removal). This commit will be reverted after testing.

Made-with: Cursor
(cherry picked from commit 0df84a6)

Co-authored-by: Ed Savage <[email protected]>

…) (#2943)" (#2946)

This reverts commit f04e8f1.

Made-with: Cursor
(cherry picked from commit f159e4a)

Co-authored-by: Ed Savage <[email protected]>

…#2956)

Made-with: Cursor

…ve (#2957) (#2959)

Made-with: Cursor
(cherry picked from commit d2d4f4b)

Co-authored-by: Ed Savage <[email protected]>

Made-with: Cursor
(cherry picked from commit 510ea41)

Co-authored-by: Ed Savage <[email protected]>

Made-with: Cursor

Made-with: Cursor
(cherry picked from commit d33f28e)

Co-authored-by: Ed Savage <[email protected]>

Made-with: Cursor

)

* [ML] Fix CProcessStats RSS units and initialization (#2917)

Fixes two bugs in residentSetSize() on Linux:

Initialize rss to 0 (prevents UB if /proc/self/statm unreadable)
Convert from pages to bytes using sysconf(_SC_PAGE_SIZE) (was ~4096x too small)

(cherry picked from commit 46f3b00)

…#2936) (#2986)

Add a static TorchScript graph validation layer that rejects models
containing operations not observed in supported transformer architectures.
This reduces the attack surface by ensuring only known-safe operation
sets are permitted, complementing the existing Sandbox2/seccomp defenses.

Backports #2936

…lidation…" (#2996)

This reverts commit e0742bc.