Harden generated workflow script against unsafe JSON quoting (CodeQL alert #600)

[Copilot]

This PR addresses the code scanning finding for unsafe quoting in generated script content. The fix replaces brittle string embedding with safe literal encoding while preserving behavior of network allowlist expansion.

• What changed

  • Updated buildWorkflowCallNetworkAllowedUpdateScript in pkg/workflow/awf_helpers.go to embed JSON using Go-escaped string literals instead of raw triple-quoted interpolation in Python.

• Why this resolves the alert

  • Eliminates quote-breakout risk in generated Python by avoiding manual/raw quoting of serialized JSON payloads.

• Code-level delta

  // before
  ecosystem_map = json.loads(r'''%s''')
  
  // after
  ecosystem_map = json.loads(%q)

[pelikhan]

@copilot merge main and recompile