fix(core): reject negative DeepSeek coordinates - #3067

The action lynx-infra/cache/restore@d6bd70bf2182b228ff5cfa9539e5f61b0929a1ba is not allowed in web-infra-dev/midscene because all actions must be from a repository owned by web-infra-dev, created by GitHub, verified in the GitHub Marketplace, or match one of the patterns: CodSpeedHQ/action@*, Codex-/await-remote-run@*, Codex-/return-dispatch@*, JamesIves/github-pages-deploy-action@*, ReactiveCircus/android-emulator-runner@*, Swatinem/rust-cache@*, actions-rs/cargo@*, actions-rs/clippy-check@*, actions-rs/toolchain@*, addnab/docker-run-action@*, anthropics/claude-code-action@*, appleboy/ssh-action@*, benchmark-action/github-action-benchmark@*, burnett01/rsync-deployments@*, cargo-bins/cargo-binstall@*, cloudflare/wrangler-action@*, codecov/codecov-action@*, convictional/trigger-workflow-and-wait@*, crate-ci/typos@*, cypress-io/github-action@*, delinoio/devbird-action@*, docker/setup-qemu-action@*, dorny/paths-filter@*, dtolnay/rust-toolchain@*, golangci/golangci-lint-action@*, google...