fix(hrr): keep capture archives private and refuse planted links - #12253

Warning: Code scanning cannot determine the alerts introduced by this pull request, because 4 configurations present on refs/heads/develop were not found:

Actions workflow (rocprofiler-sdk-codeql.yml)

• ❓  /language:actions
• ❓  /language:python

Actions workflow (cuid-codeql.yml)

• ❓  /language:cpp

Actions workflow (aqlprofile-codeql.yml)

• ❓  /language:c-cpp

View all branch alerts.