RAG Data Leakage Test Suite [2026]: CI Red-Team Setup

Build an automated red-team suite for RAG apps: canary tokens, regex + similarity detectors, multi-step prompt-injection attacks, and a CI risk score that blocks risky merges.