fix: clamp attestation target to source #24

Job	Run time
kimi-review / review	14s
claude-review / claude-review	2m 43s
codex-review / Codex Code Review	58s
codex-review / post_feedback	6s
	4m 1s

Provide feedback