[docs] Update documentation for features from 2026-03-15

[github-actions]

Documentation Updates — 2026-03-15

This PR updates documentation based on user-facing features merged in the last 24 hours.

Features Documented

• GHES host auto-detection in gh aw audit and gh aw add-wizard (from Add GHES auto-detection to audit and add-wizard commands #20973)
• Write-sink guard policy extended to all non-GitHub MCP servers (from feat: add write-sink guard policy to all non-GitHub MCP servers configured by gateway #21005)

Changes Made

• Updated docs/src/content/docs/setup/cli.md — added a note in the GitHub Enterprise Server Support section clarifying that gh aw audit and gh aw add-wizard auto-detect the GHES host from the git remote, removing the need to set GH_HOST manually.

• Updated docs/src/content/docs/reference/github-tools.md — expanded the "Safe Outputs Integration" section (now "Non-GitHub MCP Server Integration") to document that the write-sink guard policy derived from the GitHub guard policy is now applied to all non-GitHub MCP servers (playwright, serena, mcp-scripts, agentic-workflows, web-fetch, and custom tools), not just safe-outputs.

Merged PRs Referenced

• Add GHES auto-detection to audit and add-wizard commands #20973 — Add GHES auto-detection to audit and add-wizard commands
• feat: add write-sink guard policy to all non-GitHub MCP servers configured by gateway #21005 — feat: add write-sink guard policy to all non-GitHub MCP servers configured by gateway

Notes

The following merged PRs were reviewed but require no documentation changes:

• Remove copilot-preflight script and associated step generation #21016 — Copilot pre-flight diagnostic removed (was added and removed same day, no net user-visible change)
• Add go firewall allowed set to shared/go-make.md #21014 — Internal Go firewall allowed set change (not user-facing)
• perf: optimize extractWorkflowNameFromFile by eliminating unnecessary YAML parse #21012 — Internal perf optimization (not user-facing)
• fix: use artifact prefix in conclusion job and script step downloads for workflow_call context #21011 — Bug fix for artifact prefix in workflow_call context (transparent fix)
• feat: update action-tag to use action pins mode (gh-aw-actions) with v0 #20991 — Action-tag pins mode update (docs already updated in [instructions] Sync github-agentic-workflows.md with v0.40.1 #21001)
• Improve run details step summary: bullet points, aw version, and full aw_info rendering #20989 — Run details step summary improvements (internal tooling)
• Optimize qmd-docs workflows: explicitly instruct models to use qmd-query for doc search #20987 — qmd-docs workflow optimization (internal)

Generated by Daily Documentation Updater · ◷

• expires on Mar 16, 2026, 4:28 AM UTC