Remove unsafe SharePoint Graph batch exposure
loading diff…
$batch executor (ExecuteBatch) was being autoloaded into the SharePoint Graph toolkit and allows caller-controlled subrequests to be forwarded with the connected account token, which can exercise arbitrary Graph endpoints and destructive operations.ExecuteBatch from apps/sharepoint_graph/tool.py so the generic batch executor is not imported into the tool surface.ExecuteBatch from the SharePointGraph.actions() list in apps/sharepoint_graph/tool.py so the enum SHAREPOINT_GRAPH_EXECUTE_BATCH is no longer registered as an invokable action.tests/test_apps/test_sharepoint_graph/test_action_registry.py to stop expecting SHAREPOINT_GRAPH_EXECUTE_BATCH and added a regression check that the tool.py source does not contain the ExecuteBatch import or listing.uv run pytest tests/test_apps/test_sharepoint_graph/test_action_registry.py -q and the test suite passed (121 passed).uv run ruff check apps/sharepoint_graph/tool.py tests/test_apps/test_sharepoint_graph/test_action_registry.py and lint checks passed.git diff --check to confirm no whitespace/patch issues and it reported no problems.