worker-management

This script generates worker configuration and stores credentials and optional telemetry settings in files. Its main security issue is that unvalidated WORKER_NAME controls the output path, enabling path traversal and unintended file writes if an attacker can supply that argument. CMS license-key transmission is conditional on explicit observability configuration and the configured endpoint. Severity is moderate to high depending on control of WORKER_NAME; no clear malware behavior is present.