Update runner-doctor catalog with B29, B30, and C10

[Copilot]

Adds three newly identified self-hosted/GHEC failure-mode lessons to the shared catalog, workflow playbook, and portable runner-doctor agent:

• B29 — Container workdir mount gaps: Documents codex-engine context-rebuild failures caused by an expected workspace path missing from the chroot.
• B30 — Startup diagnostics: Documents pre-egress failures that previously left no Squid logs and caused awf logs summary to report no sources.
• C10 — Fine-grained PAT authentication: Documents incorrect Copilot Authorization schemes, GHEC model-discovery gaps, and legacy placeholder credential handling.

Each entry includes remediation, probes, citations, and the corresponding quick-lookup signal. The workflow alignment tests and generated lock metadata are updated to keep all catalog copies synchronized.

Example diagnostic mappings:

context-rebuild circuit breaker tripped + failed cd → B29
no log sources found after startup failure → B30
wrong Copilot Authorization scheme with github_pat_... → C10

• Fixes 🩺 Runner Doctor UpdateRunner Doctor: 3 new self-hosted/GHEC failure-mode lessons (2026-09-01 scan) #8067

[Copilot]

🟡 Changes recommended

The portable catalog accidentally replaces C9 with C10, leaving its C9 references unresolved.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

Updates runner-doctor knowledge for three recently fixed AWF failure modes.

Changes:

• Adds B29, B30, and C10 diagnostics and remediation.
• Synchronizes workflow and portable-agent guidance.
• Updates alignment tests and generated metadata.

File summaries

File	Description
scripts/ci/self-hosted-runner-doctor-workflow.test.ts	Tests new catalog entries.
.github/workflows/shared/self-hosted-failure-modes.md	Adds canonical failure-mode records.
.github/workflows/self-hosted-runner-doctor.md	Adds diagnostic mappings and playbook guidance.
.github/workflows/self-hosted-runner-doctor.lock.yml	Updates generated body hash.
.github/agents/self-hosted-runner-doctor.md	Updates portable catalog and playbook.

Review details

• Files reviewed: 5/5 changed files
• Comments generated: 1
• Review effort level: Balanced

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

[lpcox]

@copilot address review feedback and rebase main

[Copilot]

@copilot address review feedback and rebase main

Restored the C9 row in the portable runner-doctor catalog and added an alignment assertion in commit 9f6833c. Main was merged into the branch (rather than rebased) so the update could be published without rewriting history.

[github-actions]

✅ Copilot review passed with no inline comments.

@copilot Add the ready-for-aw label to this PR to trigger agentic CI smoke tests.