chore: upgrade gh-aw runtime

[github-actions]

Automated gh-aw runtime upgrade.

⚠️ Workflow recompilation needed

The following workflow files also need updating but cannot be pushed automatically (GITHUB_TOKEN lacks the workflows scope required to modify files under .github/workflows/):

.github/workflows/copilot-setup-steps.yml
.github/workflows/devops-health-check.lock.yml
.github/workflows/devops-health-check.md
.github/workflows/devops-health-groom.lock.yml
.github/workflows/devops-health-groom.md
.github/workflows/devops-health-investigate.lock.yml
.github/workflows/devops-health-investigate.md
.github/workflows/issue-investigate.lock.yml
.github/workflows/issue-triage.lock.yml
.github/workflows/markdown-linter.lock.yml
.github/workflows/pr-malicious-scan.agent.lock.yml

After merging this PR, run locally:

git pull
gh extension upgrade gh-aw
gh aw compile
git add '.github/workflows/'
git commit -m 'chore: recompile gh-aw workflows'
git push

To fully automate this, configure a GitHub App with workflows:write permission and use actions/create-github-app-token in this workflow.

[github-actions]

⏭️ No skills or agents to evaluate — no changed targets with eval specs were found in this PR. View workflow run

[github-actions]

✅ Evaluation passed for 539fb41. cc @webreidi @AbhitejJohn — please review.

[github-actions]

👋 @github-actions[bot] — this PR has merge conflict. When you're ready, please address the feedback and push an update; the triage bot will pick up the next state automatically. (Add the no-stale label to silence further pings.)

[Evangelink]

/evaluate

[github-actions]

⏭️ No skills or agents to evaluate — no changed targets with eval specs were found in this PR. View workflow run

[github-actions]

✅ Evaluation passed for 3bb3aa4. cc @webreidi @AbhitejJohn — please review.

[github-actions]

⏭️ No skills or agents to evaluate — no changed targets with eval specs were found in this PR. View workflow run