[side-quest] feat: extract ephemeral/isolated runners side quest from step 24

[github-actions]

Caution

Protected files were modified in this change.
This pull request is in request_review mode and requires explicit human scrutiny before merge.

Protected files: README.md

What this PR does

Source file mined: workshop/24-self-hosted-runners.md

Side quest extracted: The embedded <details> block titled "Advanced: ephemeral and isolated runners" covering ephemeral runner registration, JIT runners, proxy configuration, and network isolation for air-gapped environments.

Changes

• Created workshop/side-quest-24-01-ephemeral-runners.md — self-contained optional tutorial on ephemeral runners, JIT runners, proxy env vars, and network isolation
• Updated workshop/24-self-hosted-runners.md — replaced the <details> block with a single short tip callout linking to the new side quest
• Updated workshop/README.md — added the new side quest to the Optional Side Quests section, noting it branches from Step 24

Routing for learners

Learners on the main self-hosted-runner path see a brief tip and can optionally follow the link. The side quest ends with a clear return link back to Step 24. No main-path content was lost — all details are preserved in the side quest.

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 🗺️ Side Quest · 52.3 AIC · ⌖ 6.82 AIC · ⊞ 5.2K · ◷

• expires on Jul 26, 2026, 4:37 AM UTC

---

Note

This was originally intended as a pull request, but the git push operation failed.

Original error: pushSignedCommits: refusing unsigned push for branch 'side-quest-24-ephemeral-runners-bd37e6edc63bc92c': Signed-commit payload violates file-protection policy (request_review): workshop/README.md

Workflow Run: View run details and download bundle artifact

The bundle file is available in the agent artifact in the workflow run linked above.

To create a pull request with the changes:

# Download the artifact from the workflow run
gh run download 30144095311 -n agent -D /tmp/agent-30144095311

# Fetch the bundle into a temporary ref, then update the local branch
git fetch /tmp/agent-30144095311/aw-side-quest-24-ephemeral-runners.bundle refs/heads/side-quest-24-ephemeral-runners:refs/bundles/create-pr-side-quest-24-ephemeral-runners-bd37e6edc63bc92c-1bc40112
git update-ref refs/heads/side-quest-24-ephemeral-runners-bd37e6edc63bc92c refs/bundles/create-pr-side-quest-24-ephemeral-runners-bd37e6edc63bc92c-1bc40112
git checkout side-quest-24-ephemeral-runners-bd37e6edc63bc92c
# Ensure the working tree matches the updated branch
git reset --hard
# Remove the temporary bundle ref
git update-ref -d refs/bundles/create-pr-side-quest-24-ephemeral-runners-bd37e6edc63bc92c-1bc40112

# Push the branch to origin
git push origin side-quest-24-ephemeral-runners-bd37e6edc63bc92c

# Create the pull request
gh pr create --title '[side-quest] feat: extract ephemeral/isolated runners side quest from step 24' --base main --head side-quest-24-ephemeral-runners-bd37e6edc63bc92c --repo githubnext/gh-aw-workshop