v0.8.12

A new 08-agents lab: the 08-10 Copilot SDK container rehosted on the shared 1:N multi account, taking its inference from the APIM core gateway.

Added

• 08-agents/08-10b-hosted-copilot-sdk-agent-multi - self-contained "B" variant of 08-10 that rehosts the GitHub Copilot SDK container on the existing shared aif-spoke-multi (1:N) account, with inference from the APIM core gateway instead of a local model deployment. Ships its own src/ and data/ (no dependency on 08-10). The 08-10b-01 notebook mints a dedicated foundry-gateway-copilot-sdk APIM subscription, deploys a gpt-5-mini reasoning model on the gateway backend, deploys the project + ACR Bicep, enables the capability host, builds the agent image, registers + role-grants the hosted agent in APIM-direct mode, then runs the smoke tests and the M365 analytics demo.
• APIM-direct, not a Foundry connection - the container points straight at the gateway (base_url = <apim>/openai, the subscription key in the api-key header, bare reasoning model gpt-5-mini), bypassing the Foundry project connection. Foundry's connection model-gateway is supported only for prompt agents, so a hosted agent's Responses call through a connection/deployment model string fails with DeploymentNotFound. A reasoning model is required because the Copilot CLI's Responses protocol carries encrypted reasoning content that gpt-4.1-mini rejects. No connection and no local model deployment, so the rg-foundry-multi deny-model-deployments policy holds; agent RBAC is AcrPull + Foundry User only. Tradeoff: the gateway key lives in the container env var (Key Vault or managed-identity-to-APIM noted as hardening).
• Notebook-output scrubbing tooling - scripts/scrub_notebooks.py plus a .githooks/pre-commit hook that redacts Azure secrets and identifiers from committed notebook outputs per the CONTRIBUTING.md policy (keeps the canonical demo suffix and resource names, maps subscription/tenant/principal UUIDs to the all-zeros placeholder, redacts keys, UPNs, and session ids). Enable with git config core.hooksPath .githooks.

Changed

• README 08-agents sub-lab table: added a row for 08-10b.