[awf] Bump firewall container images to v0.25.63

[lpcox]

Request

Bump AWF container image tags from the current pinned version to 0.25.63 in the gh-aw compiler/lock file generation.

Release: https://github.com/github/gh-aw-firewall/releases/tag/v0.25.63

What's in v0.25.63

• api-proxy: Correctly capture Responses API cache reads in token usage rollups (Apply bundler to noop.cjs to resolve load_agent_output dependency #4311)
• api-proxy: Forward Copilot BYOK session metadata to upstream providers ([task] Add warning logs for float-to-int truncation #4314)
• feat: Add AWF config support for model-router provider settings ([task] Document string-to-number coercion in schema descriptions #4312)
• feat: Validate and resolve COPILOT_MODEL aliases before engine launch ([task] Add validation tests for type coercion edge cases #4316)
• refactor: Narrow test-only exports (resetAgentExternallyKilled, validateAwfFileConfig) ([docs] Update documentation for features from 2025-11-19 #4317, Move noop processing step from separate job into conclusion job #4318)
• fix: Increase doc-maintainer max-turns from 4 to 10 ([task] Create comprehensive documentation page for YAML type handling #4315)
• test: CLI-options and pid-tracker branch coverage (Display complete tool list in parse log step summary #4303)

Images to update

ghcr.io/github/gh-aw-firewall/agent:0.25.63
ghcr.io/github/gh-aw-firewall/api-proxy:0.25.63
ghcr.io/github/gh-aw-firewall/squid:0.25.63
ghcr.io/github/gh-aw-firewall/cli-proxy:0.25.63

All images are cosign-signed and published to GHCR.