Fix Issue Arborist Repo Mind Light token

[szabta89]

Summary

• update Issue Arborist to import repo-mind-light-aw v1.1.1
• pass GH_AW_REPO_MIND_LIGHT_TOKEN into Repo Mind Light so model calls use the token with Models read access
• use the gh-aw GitHub token fallback for the pre-agent issue fetch that previously failed through the proxy

Security review

• New restricted secret: GH_AW_REPO_MIND_LIGHT_TOKEN
• Reviewed use: the secret is only passed as Repo Mind Light's COPILOT_GITHUB_TOKEN in the generated indexing and MCP server steps. It is needed for Copilot model embedding/query calls and is not echoed or written to output.
• Actions/redirects: no new actions or redirects were introduced by this change.

Validation

• ./gh-aw compile --no-emit --validate --approve issue-arborist

[Copilot]

Pull request overview

Updates the Issue Arborist workflow to use a newer Repo Mind Light import and ensures Repo Mind Light and the pre-agent issue fetch authenticate with the intended tokens (including a new fine-grained token for Copilot model access).

Changes:

• Bump the Repo Mind Light shared workflow import to repo-mind-light-aw v1.1.1 (commit ca993f5...), including updated pinned image digest.
• Pass GH_AW_REPO_MIND_LIGHT_TOKEN into Repo Mind Light as COPILOT_GITHUB_TOKEN via a new copilot-github-token import input.
• Update the pre-agent gh issue list fetch to use the GH_AW_GITHUB_MCP_SERVER_TOKEN || GH_AW_GITHUB_TOKEN || GITHUB_TOKEN fallback for proxy compatibility.

Show a summary per file

File	Description
.github/workflows/issue-arborist.md	Updates the Repo Mind Light import version, injects the new token input, and adjusts issue-fetch auth fallback.
.github/workflows/issue-arborist.lock.yml	Regenerates the resolved workflow/manifest to reflect the new import, new secret, and updated token wiring.
.github/aw/imports/githubnext/repo-mind-light-aw/ca993f50371e3fc138e672335bfc5879e60f3e98/.github_workflows_shared_repo-mind-light.md	Adds a copilot-github-token import input and routes it into Repo Mind Light indexing/server steps.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Comments suppressed due to low confidence (1)

.github/aw/imports/githubnext/repo-mind-light-aw/ca993f50371e3fc138e672335bfc5879e60f3e98/.github_workflows_shared_repo-mind-light.md:216

• The indexing step now sources COPILOT_GITHUB_TOKEN from the copilot-github-token import input, but the failure message in the script still says the "COPILOT_GITHUB_TOKEN secret is required". Consider updating the message to reference the import input (or more generally "token/env var") so it’s actionable when the value is provided via with: copilot-github-token: rather than a repository secret.

• Files reviewed: 3/3 changed files
• Comments generated: 0

[github-actions]

✅ smoke-ci: safeoutputs CLI comment + comment-memory run (25803327259)

Generated by Smoke CI for issue #31942 · ◷