fix: replace heredoc with printf for empty SARIF fallback

[danielcuthbert]

No description provided.

[github-actions]

OpenAnt Security Scan

🟢 No confirmed vulnerabilities

Metric	Value
Units scanned
Confirmed vulnerable
Bypassable controls
Inconclusive
LLM cost	$0.00

Stage 1 detection + Stage 2 attacker simulation via OpenAnt.
See the Security > Code scanning tab for annotated findings.

_{commit 14bf3851bcc89a0bc0aa4ae09fbe5fd74205bbc8}