Pass a constant format string to console.log in compare.mjs (same output). Annotate the mutable action tags in the Windows fallback workflow with nosemgrep; workflow behaviour is unchanged.