[instructions] Sync github-agentic-workflows.md with v0.40.1

[github-actions]

Instructions Update - Synchronized with v0.40.1

This PR updates github-agentic-workflows.md based on code analysis since v0.40.1.

Changes Made

• Added tools.github.lockdown field: enables lockdown mode to limit content surfaced from public repositories to items authored by users with push access (boolean, default: false)
• Added tools.github.app field: GitHub App configuration for token minting; when set, mints an installation access token at workflow start that overrides github-token (supports app-id, private-key, owner, repositories)

These fields are present in pkg/workflow/tools_types.go (GitHubToolConfig.Lockdown and GitHubToolConfig.App) and in pkg/parser/schemas/main_workflow_schema.json, but were previously undocumented in the instructions file.

Documentation Commits Reviewed

• 7ba970a Add debug logging to 5 pkg files (no user-facing changes)

Code Sources Reviewed

• pkg/workflow/compiler_types.go — SafeOutputsConfig struct (all safe-output types verified)
• pkg/workflow/safe_outputs_config.go — safe-output parsing (all operations verified against docs)
• pkg/workflow/tools_types.go — GitHubToolConfig struct (found undocumented fields)
• pkg/workflow/mcp_github_config.go — GitHub App token minting implementation
• pkg/parser/schemas/main_workflow_schema.json — JSON Schema (confirmed fields and descriptions)

Validation

• Followed prompting best practices (imperative mood, minimal examples)
• Maintained technical tone and brevity
• Updated only necessary sections
• Verified accuracy against current codebase
• No outdated or redundant content added

Generated by Instructions Janitor

• expires on Feb 28, 2026, 12:00 AM UTC