feat(uk-ai-resilience): create up to 2 labeled issues for top-priority findings

[Copilot]

This updates the UK AI Operational Resilience workflow to turn the highest-priority Tier B/C/D findings into actionable GitHub issues, capped at two per run. The discussion report output remains unchanged; issue creation is additive and constrained.

• Workflow behavior updates

  • Added safe-outputs.create-issue with:
    • max: 2
    • labels: [security, high-priority, ai-generated]
    • title-prefix: "[uk-ai-resilience] "
  • Added issues to the GitHub toolsets so the agent can check open issues before creating new ones.

• Prompt logic for issue creation

  • Added Phase 6 — Create issues for high-priority items to explicitly require:
    • selecting up to 2 top findings (Tier C/D first, then critical/high remediation priority),
    • deduplicating against open issues,
    • including tier, risk scoring, remediation action, SLA urgency, and discussion link in issue bodies.

• Compiled workflow output

  • Regenerated the corresponding .lock.yml to reflect the new safe-output/tooling and prompt behavior.

safe-outputs:
  create-issue:
    max: 2
    labels: [security, high-priority, ai-generated]
    title-prefix: "[uk-ai-resilience] "

[Copilot]

Pull request overview

This PR extends the UK AI Operational Resilience gh-aw workflow to optionally turn the highest-priority Tier B/C/D findings into up to two labeled GitHub issues per run, while keeping the existing discussion report behavior intact and regenerating the compiled workflow output.

Changes:

• Added the issues GitHub toolset so the agent can query existing open issues for deduplication.
• Added a safe-outputs.create-issue configuration capped at max: 2 with predefined labels and a title prefix.
• Updated the workflow prompt with a new “Phase 6” instructing the agent to select and file up to two top-priority findings as issues.

Show a summary per file

File	Description
.github/workflows/uk-ai-operational-resilience.md	Adds issues toolset, configures safe-outputs.create-issue, and introduces Phase 6 prompt requirements for issue creation/deduplication.
.github/workflows/uk-ai-operational-resilience.lock.yml	Regenerates compiled workflow to include the new safe-output tool (create_issue) and updated handler configuration.

Review details

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 2/2 changed files
• Comments generated: 1
• Review effort level: Low