[WIP] Support bounded agents in workflow frontmatter and generated AWF configuration

[Copilot]

• Add bounded-agent frontmatter parsing, validation, and AWF configuration generation
• Add schemas, completions, author guidance, version bumps, and regenerated workflow locks
• Add focused parsing, merge, validation, and JSON generation tests
• Run formatting, build, lint, schema, targeted-test, and lock-drift validation
• Complete automated security scanning and final verification

• Fixes Support bounded agents in workflow frontmatter and generated AWF configuration #50486

[github-actions]

🏷️ PR Triage

• Category: feature
• Risk: high
• Priority score: 47/100 (impact 25, urgency 12, quality 10)
• Recommended action: defer

Rationale

Large, WIP, draft change (6.8k+/6.3k- across 291 files, mostly regenerated .lock.yml). No CI has run yet and reviews are pending; security-scan checklist item still unchecked in the description. High file-count / config-generation risk warrants full review before merge — deferring until CI is green and the PR is marked ready.

Generated by 🔧 PR Triage Agent · auto · 45.7 AIC · ⌖ 2.51 AIC · ⊞ 8K · ◷

[lpcox]

@copilot also do this #50486 (comment)

[Copilot]

@copilot also do this #50486 (comment)

Addressed in 47107e0: defaults now use gh-aw-firewall v0.27.44 and gh-aw-mcpg v0.4.8, with regenerated workflow locks.

[github-actions]

PR Triage: #50503

Category: feature | Risk: medium | Priority Score: 48/100 (impact 30, urgency 8, quality 10)
Recommended action: defer
WIP draft, huge diff (6.8k+/6.3k- across 291 files) — high risk, low readiness; defer until scoped down.

Generated by 🔧 PR Triage Agent · auto · 45.2 AIC · ⌖ 2.9 AIC · ⊞ 8K · ◷