Prefer gh-proxy/gh and cli-proxy/mcp-clis in workflow-generation instructions

[Copilot]

This updates workflow-authoring guidance so new workflows consistently use tools.github.mode: gh-proxy with gh for GitHub reads, and tools.cli-proxy: true with mounted mcp-clis for non-GitHub MCP tooling. The goal is to make this the default instruction path for generating new workflows.

• Creation prompt defaults

  • Updated .github/aw/create-agentic-workflow.md to explicitly prefer:
    • gh-proxy + gh for GitHub read access
    • cli-proxy + mcp-clis for non-GitHub MCP servers
  • Clarified the tools example as a combined configuration and noted when cli-proxy can be omitted.

• Cross-doc consistency

  • Updated .github/aw/workflow-constraints.md security posture guidance to reflect the same GitHub vs non-GitHub tool preference split.
  • Updated .github/aw/github-agentic-workflows.md core rules to match the preferred model.

• Dispatcher skill sync

  • Synced .github/skills/agentic-workflows/SKILL.md file list with current .github/aw/*.md prompt inventory so generated/checked-in skill content remains aligned.

tools:
  github:
    mode: gh-proxy
    toolsets: [default]
  cli-proxy: true

[Copilot]

Pull request overview

Updates the workflow-authoring documentation to standardize how new agentic workflows configure tool access, explicitly steering authors toward tools.github.mode: gh-proxy + gh for GitHub reads and tools.cli-proxy: true + mounted mcp-clis for non-GitHub MCP tooling.

Changes:

• Updated security posture and core rules docs to distinguish GitHub reads (gh-proxy + gh) from non-GitHub MCP usage (cli-proxy + mcp-clis).
• Updated the workflow-creation guidance with an explicit combined tools configuration example and added mcp-clis.md to the required reference set.
• Added guidance about when cli-proxy can be omitted (GitHub-only reads), though one example currently conflicts with this (see stored comment).

Show a summary per file

File	Description
.github/aw/workflow-constraints.md	Refines security posture guidance to prefer gh-proxy/gh for GitHub reads and cli-proxy/mcp-clis for non-GitHub MCP tooling.
.github/aw/github-agentic-workflows.md	Updates core rules to align GitHub vs non-GitHub tooling recommendations.
.github/aw/create-agentic-workflow.md	Updates workflow creation prompt defaults, adds mcp-clis.md as a reference, and provides combined tools configuration examples.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 3/3 changed files
• Comments generated: 1