Fix Issue Triage workflow runtime and refresh compiled lockfile

[Copilot]

The Issue Triage agentic workflow was failing before inference started because the compiled runtime expected a Copilot binary at /usr/local/bin/copilot, which was not present on the runner. This updates the workflow source to satisfy current strict validation and regenerates the compiled workflow with the newer gh-aw runtime layout.

• Root cause addressed

  • Refreshes the compiled issue-triage.lock.yml from gh-aw v0.86.2
  • Picks up the newer Copilot runtime path handling that stages the binary under ${RUNNER_TEMP}/gh-aw/bin/copilot instead of hardcoding /usr/local/bin/copilot

• Workflow source hardening

  • Adds an explicit disabled shell policy to the workflow source:
    • tools.bash: []
  • Keeps the workflow aligned with strict mode requirements when tools.github.min-integrity: none is set

• Generated workflow impact

  • Updates the pinned gh-aw setup action and generated runtime metadata
  • Regenerates the lockfile so the compiled agent and detection paths use the new Copilot harness invocation

tools:
  bash: []
  github:
    lockdown: false
    min-integrity: none

• Fixes [aw] Issue Triage failed #67