add support for agentic workflows

[ks6088ts]

What this PR does / why we need it

• add support for agentic workflows

Which issue(s) this PR fixes:

Fixes #87

Does this introduce a breaking change?

[ ] Yes
[x] No

Pull Request Type

What kind of change does this Pull Request introduce?

[ ] Bugfix
[x] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] Documentation content changes
[ ] Other... Please describe:

How to Test

• Get the code

ORGANIZATION=<organization-name>
REPOSITORY=<repository-name>

git clone git@github.com:$ORGANIZATION/$REPOSITORY.git
cd $REPOSITORY

• Test the code

make ci-test

What to Check

Verify that the following are valid

• ...

Additional Information

[Copilot]

Pull request overview

This PR introduces GitHub Agentic Workflows (gh-aw) support to run the “refresh workshop docs” automation in a sandboxed, permission-separated workflow, aligning with the security goals described in Issue #87.

Changes:

• Adds a gh-aw workflow definition (refresh-workshop-docs.md) and its compiled lock workflow (refresh-workshop-docs.lock.yml) to refresh docs and open a PR via safe outputs.
• Adds repo-level gh-aw/Copilot agent configuration (MCP server config, router skill, agent descriptor, and actionlint suppression for generated lock files).
• Marks generated lock workflows as linguist-generated in .gitattributes.

Reviewed changes

Copilot reviewed 8 out of 9 changed files in this pull request and generated 2 comments.

Show a summary per file

File	Description
.github/workflows/refresh-workshop-docs.md	Defines the agentic workflow prompt, constraints, network allowlist, and safe-outputs PR creation.
.github/workflows/refresh-workshop-docs.lock.yml	Compiled gh-aw lock workflow implementing the sandbox + detection + safe-outputs jobs.
.github/workflows/copilot-setup-steps.yml	Adds a Copilot Agent setup workflow to install the gh-aw CLI/extension in CI.
.github/skills/agentic-workflows/SKILL.md	Adds a routing skill for gh-aw workflow design/debug/upgrade tasks.
.github/mcp.json	Registers a local MCP server entry for gh aw mcp-server and related tools.
.github/aw/actions-lock.json	Adds an actions lock mapping for gh-aw-related actions (SHA pinning metadata).
.github/agents/agentic-workflows.md	Adds an agent descriptor for gh-aw workflow help and routing.
.github/actionlint.yaml	Suppresses actionlint false positives on generated *.lock.yml concurrency queue key.
.gitattributes	Marks *.lock.yml workflows as generated and sets merge behavior (needs adjustment).

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.