ci: local_summary.py reads fixed file names, not CLI arguments

Sonar pythonsecurity:S8707 (path traversal) flagged opening paths taken from
sys.argv. The workflow always wrote jev.txt and jmh.json in the working
directory, so the script now opens exactly those and takes no arguments.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: dfa1

.github/scripts/local_summary.py

@@ -1,13 +1,14 @@
 """Markdown for the GitHub job summary: agreement with Jev (JevComparison output) and throughput (JMH JSON).
-Usage: python3 .github/scripts/local_summary.py jev.txt jmh.json >> $GITHUB_STEP_SUMMARY"""
+Reads jev.txt and jmh.json from the working directory, the files the Local engines workflow writes there.
+Usage: python3 .github/scripts/local_summary.py >> $GITHUB_STEP_SUMMARY"""
 import json
 import math
 import os
 import platform
 import re
-import sys
 
-jev_file, jmh_file = sys.argv[1], sys.argv[2]
+# fixed names, not arguments: nothing outside this workflow decides which files get opened
+jev_file, jmh_file = "jev.txt", "jmh.json"
 print(f"## Local engines on `{os.environ.get('RUNNER_OS', platform.system())}` "
       f"({platform.machine()}, {os.cpu_count()} CPUs)\n")
 

.github/workflows/local.yml

@@ -74,4 +74,4 @@ jobs:
 
       - name: Summary
         if: always()
-        run: python3 .github/scripts/local_summary.py jev.txt jmh.json >> "$GITHUB_STEP_SUMMARY"
+        run: python3 .github/scripts/local_summary.py >> "$GITHUB_STEP_SUMMARY"