eslint: do not warn about "object injection"

We are using that pattern all over the place, and unless an attacker
gets write access to the `gitgitgadget/git` repository (in which case
there are much easier ways to wreak havoc than to go through
GitGitGadget), there is no way to inject anything.

Signed-off-by: Johannes Schindelin <johannes.schindelin@gmx.de>

Author: dscho

eslint.config.mjs

@@ -124,6 +124,7 @@ export default tseslint.config(
       "prettier/prettier": "warn",
       radix: "error",
       "use-isnan": "error",
+      "security/detect-object-injection": "off",
     },
   },
   {

lib/git-notes.ts

@@ -1,4 +1,3 @@
-/* eslint-disable security/detect-object-injection */
 import { emptyBlobName, git, revParse } from "./git.js";
 import { fromJSON, toJSON } from "./json-util.js";
 import { sleep } from "./sleep.js";