[github] Disable signed-commit replay in Code Radiator merge PR pushes

[Copilot]

Code Radiator failed to create the main -> xcode26.5 merge PR because safe-outputs attempted signed commit replay, then refused unsigned fallback when a submodule update was present. This change switches the merge workflow to explicit unsigned push behavior for PR branch updates.

• Root cause addressed

  • Configure safe-outputs PR write paths to avoid pushSignedCommits replay for merge branches that can include unsupported commit shapes (notably submodule bumps).

• Workflow source updates (code-radiator.md)

  • Set signed-commits: false under:
    • safe-outputs.create-pull-request
    • safe-outputs.push-to-pull-request-branch

• Compiled workflow parity (code-radiator.lock.yml)

  • Updated generated safe-outputs handler/config payloads to include:
    • "signed_commits": false for create_pull_request
    • "signed_commits": false for push_to_pull_request_branch

safe-outputs:
  create-pull-request:
    max: 10
    signed-commits: false
  push-to-pull-request-branch:
    max: 10
    signed-commits: false

[Copilot]

Pull request overview

Disables signed-commit replay in the Code Radiator agentic workflow's safe-outputs so that merge PR branch pushes (which may include submodule bumps) no longer fail when the signed-commit path cannot handle the commit shape.

Changes:

• Add signed-commits: false to safe-outputs.create-pull-request and safe-outputs.push-to-pull-request-branch in the workflow source.
• Regenerate the compiled lock file so both the safe outputs config JSON and the handler config env var include "signed_commits": false for those two outputs.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/code-radiator.md	Adds signed-commits: false to the two PR-writing safe outputs.
.github/workflows/code-radiator.lock.yml	Regenerated lock with matching "signed_commits": false in config JSON and handler env.

[rolfbjarne]

/azp run

[azure-pipelines]

Azure Pipelines could not run because the pipeline triggers exclude this branch/path.

[rolfbjarne]

/azp run

[azure-pipelines]

Azure Pipelines could not run because the pipeline triggers exclude this branch/path.