ci(workflows): recompile agentic workflows with gh-aw v0.74.4

[jamesadevine]

Summary

The scheduled Clippy Fixer run #26166404345 failed during the safe_outputs job:

[command]/usr/bin/git fetch /tmp/gh-aw/aw-clippy-fixer-assertions-on-constants.bundle ...
error: Repository lacks these prerequisite commits:
error: 3c50dad441aca358af2fd82c94929588fc96aff2
##[error]Failed to apply bundle: The process '/usr/bin/git' failed with exit code 1
##[error]✗ Message 1 (create_pull_request) failed: Failed to apply bundle

Root cause

Race condition between agent and safe_outputs jobs:

Time (UTC)	Event
13:41:02	Workflow triggered; agent checks out main HEAD 3c50dad
13:42:33	PR #667 merges, advancing main HEAD to 4ea3182
13:41–13:49	Agent runs, produces a git bundle whose prerequisite is 3c50dad
13:50:11	safe_outputs job starts; actions/checkout with fetch-depth: 1 fetches only the new main tip 4ea3182
13:50:21	git fetch <bundle> rejects the bundle: 3c50dad is not in the shallow history

The shallow checkout in the safe_outputs job cannot satisfy the bundle's prerequisite commit whenever main moves during the agent run.

Fix

Upstream tracked this as github/gh-aw#32467 (closed) and shipped a recovery path in gh-aw v0.74.3+ (gh-aw-actions/setup bundles create_pull_request.cjs / push_to_pull_request_branch.cjs with detection of lacks these prerequisite commits errors followed by git fetch --unshallow origin).

This PR recompiles all 15 agentic workflows with gh aw v0.74.4:

• github/gh-aw-actions/setup: v0.72.1 → v0.74.4 (contains the bundle-prerequisite recovery)
• gh-aw-firewall: 0.25.41 → 0.25.46
• gh-aw-mcpg: v0.3.6 → v0.3.9
• github-mcp-server: v1.0.3 → v1.0.4
• Bundled Copilot CLI: 1.0.40 → 1.0.48

No workflow .md source files were changed; only generated *.lock.yml and actions-lock.json.

Verification

• gh aw compile → 15 workflow(s), 0 errors
• Diff confirms setup_action_pin advances and only generated files change