Replay evals leak the answer through git history

Stop a "replay a merged PR from its parent commit" agent eval from leaking the answer through git history, and audit transcripts for runs that already read it.