Update agentic workflows and dependencies

[aaronpowell]

Enhance agentic workflows by updating dependencies to their latest versions and adjusting the workflow instructions to specify the use of the staged branch for all related work. This ensures better compatibility and clarity in the workflow processes.

[Copilot]

Pull request overview

Updates the repository’s agentic workflow infrastructure by upgrading pinned gh-aw/AWF/MCP dependencies and refreshing generated workflow lock files, while clarifying that related automation should base PRs on the staged branch.

Changes:

• Regenerates multiple .lock.yml workflows with gh-aw v0.71.5 (updated actions SHAs, pinned container digests, updated runtime/bootstrap steps).
• Updates shared action pinning in .github/aw/actions-lock.json and bumps the gh-aw CLI setup action version used by the Copilot setup workflow.
• Updates the “CLI for Beginners Content Sync” workflow instructions/config to use staged as the PR base branch.

Show a summary per file

File	Description
.github/workflows/resource-staleness-report.lock.yml	Regenerated lock workflow with updated gh-aw/AWF/MCP versions and refreshed execution/bootstrap steps.
.github/workflows/pr-duplicate-check.lock.yml	Regenerated lock workflow with updated gh-aw/AWF/MCP versions and refreshed execution/bootstrap steps.
.github/workflows/learning-hub-updater.lock.yml	Regenerated lock workflow with updated gh-aw/AWF/MCP versions and updated safe-outputs constraints.
.github/workflows/duplicate-resource-detector.lock.yml	Regenerated lock workflow with updated gh-aw/AWF/MCP versions and refreshed execution/bootstrap steps.
.github/workflows/copilot-setup-steps.yml	Bumps gh-aw CLI setup action/version used for Copilot agent environment setup.
.github/workflows/cli-for-beginners-sync.md	Sets base-branch: staged and updates instructions to avoid branching from main.
.github/aw/actions-lock.json	Updates pinned action entries (e.g., github-script v9.0.0, upload-artifact v7.0.1, gh-aw setup v0.71.5).
.github/agents/agentic-workflows.agent.md	Updates gh-aw documentation links and adds CLI command reference routing guidance.

Copilot's findings

Comments suppressed due to low confidence (4)

.github/workflows/resource-staleness-report.lock.yml:396

• This step pins actions/github-script to SHA 3a2844… but the inline version comment says # v9 while other steps (and the actions lock) refer to v9.0.0. Align the comment/version annotation to a single canonical value to avoid ambiguity during audits.

      - name: Determine automatic lockdown mode for GitHub MCP Server
        id: determine-automatic-lockdown
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9

.github/workflows/pr-duplicate-check.lock.yml:412

• This step pins actions/github-script to SHA 3a2844… but the inline version comment says # v9 while other steps (and the actions lock) refer to v9.0.0. Align the comment/version annotation to a single canonical value to avoid ambiguity during audits.

      - name: Determine automatic lockdown mode for GitHub MCP Server
        id: determine-automatic-lockdown
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9

.github/workflows/learning-hub-updater.lock.yml:400

• This step pins actions/github-script to SHA 3a2844… but the inline version comment says # v9 while other steps (and the actions lock) refer to v9.0.0. Align the comment/version annotation to a single canonical value to avoid ambiguity during audits.

      - name: Determine automatic lockdown mode for GitHub MCP Server
        id: determine-automatic-lockdown
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9

.github/workflows/duplicate-resource-detector.lock.yml:397

• This step pins actions/github-script to SHA 3a2844… but the inline version comment says # v9 while other steps (and the actions lock) refer to v9.0.0. Align the comment/version annotation to a single canonical value to avoid ambiguity during audits.

      - name: Determine automatic lockdown mode for GitHub MCP Server
        id: determine-automatic-lockdown
        uses: actions/github-script@3a2844b7e9c422d3c10d287c895573f7108da1b3 # v9

• Files reviewed: 10/10 changed files
• Comments generated: 5