Enable cloud-hypervisor agent runtime on eligible agentic workflows

.github/workflows/copilot-centralization-drilldown.md

@@ -158,6 +158,7 @@ steps:
         ' > /tmp/gh-aw/data/derived-plan.json
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     sudo: false
 evals:
   - id: candidate_expanded

.github/workflows/copilot-centralization-optimizer.md

@@ -10,6 +10,7 @@ permissions:
   copilot-requests: write
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     sudo: false
 tools:
   repo-memory:

.github/workflows/daily-github-docs-seo-optimizer.md

@@ -42,6 +42,7 @@ evals:
     question: Did the agent report an actionable documentation recommendation or explain why no update was needed?
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     id: awf
     sudo: false
 ---

.github/workflows/daily-go-test-parallelizer.md

@@ -17,6 +17,7 @@ network:
     - go
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     sudo: false
 tools:
   cache-memory:

.github/workflows/daily-spending-forecast.md

@@ -91,6 +91,7 @@ safe-outputs:
 timeout-minutes: 45
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     sudo: false
 evals:
   - id: spending_forecast_analyzed

.github/workflows/daily-vulnhunter-scan.md

@@ -116,6 +116,7 @@ jobs:
           retention-days: 7
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     id: awf
     sudo: false
 steps:

.github/workflows/deepsec-security-scan.md

@@ -38,6 +38,7 @@ network:
     - ai-gateway.vercel.sh
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     sudo: false
 tools:
   bash:

.github/workflows/ponytail-reviewer.md

@@ -24,6 +24,7 @@ features:
   gh-aw-detection: true
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     sudo: false
 imports:
   - uses: shared/pr-review-base.md

.github/workflows/portfolio-analyst.md

@@ -13,6 +13,7 @@ permissions:
 
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     sudo: false
 
 tracker-id: portfolio-analyst

.github/workflows/purelock.md

@@ -154,6 +154,7 @@ safe-outputs:
   noop:
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     sudo: false
 evals:
   - id: candidate_selected

.github/workflows/security-review.md

@@ -18,6 +18,7 @@ permissions:
 
 sandbox:
   agent:
+    runtime: cloud-hypervisor
     sudo: false
 
 tools: