Summarize a pull request into security-relevant changes, risks, and reviewer questions.