[docs-linker] workshop docs: add gh-aw doc links

[github-actions]

Adds inline documentation links to 10 security-focused side-quest workshop files.

Changes by file

side-quest-16-03-token-exfiltration.md

• frontmatter → Frontmatter reference
• agentic workflow → About Workflows

side-quest-16-04-deterministic-vs-agentic-data-ops.md

• Deterministic → DeterministicOps pattern
• Agentic → About Workflows

side-quest-16-05-long-lived-credentials.md

• agentic workflow → About Workflows
• deterministic → DeterministicOps pattern
• blast radius → Threat Model

side-quest-17-01-mcp-concepts.md

• Model Context Protocol → MCP Gateway Specification
• toolsets → GitHub Toolsets
• task brief → Markdown reference
• Supply chain → Threat Model
• Blast radius → Threat Model

side-quest-17-02-security-architecture.md

• sandbox → Sandbox Configuration
• frontmatter → Frontmatter reference
• task brief → Markdown reference

side-quest-17-03-prompt-injection.md

• Prompt Injection → Threat Model
• task brief → Markdown reference
• blast radius → Threat Model

side-quest-17-04-permission-escalation.md

• Agentic Workflows → About Workflows
• task brief → Markdown reference
• prompt injection → Threat Model

side-quest-17-05-supply-chain-mcp.md

• Supply Chain → Threat Model
• threat model → Threat Model
• toolset → GitHub Toolsets
• network → Network Permissions

side-quest-17-06-output-injection.md

• agentic workflow → About Workflows

side-quest-17-07-repo-poisoning.md

• agentic workflow → About Workflows
• deterministic → DeterministicOps pattern
• Frontmatter → Frontmatter reference

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 🔗 Docs Linker · 105.1 AIC · ⌖ 10.1 AIC · ⊞ 6.6K · ◷

• expires on Jul 29, 2026, 7:19 AM UTC

[github-actions]

Warning

Firewall blocked 1 domain

The following domain was blocked by the firewall during workflow execution:

• awmgmcpg

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "awmgmcpg"

See Network Configuration for more information.

Generated by 📋 Guidelines Enforcer for #2289 · 95.6 AIC · ⌖ 5.51 AIC · ⊞ 5.7K

Comments that could not be inline-anchored

workshop/side-quest-17-06-output-injection.md:75

Rule violated: No "For more details" footers — documentation links belong inline

Offending text:

> See [Agentic Workflow Security Architecture (Explain Like You're 5)](side-quest-17-02-security-architecture.md)
> for the full security model.

Suggested fix: Remove this trailing footer blockquote. Embed the reference inline in the nearest prose sentence instead (e.g., ...see the security architecture model). The guidelines prohi…

workshop/side-quest-17-01-mcp-concepts.md:94

Rule violated: No numbered headers inside files; also malformed nested Markdown link in heading

Offending text:

## How [toolsets](https://github.github.com/gh-aw/reference/github-tools/#github-[toolsets](https://github.github.com/gh-aw/reference/github-tools/#github-toolsets)) work

Suggested fix: Remove the nested link inside the heading. Headings should use plain text or a single simple link. Rewrite as:

## How toolsets work

The word toolsets can be linked once …

workshop/side-quest-17-07-repo-poisoning.md:118

Rule violated: Incorrect frontmatter key name

Offending text:

network:
  allowed-domains:
    - "api.github.com"

Suggested fix: The correct key is allowed, not allowed-domains. Update to match the canonical schema used throughout the workshop and in production workflow files:

network:
  allowed:
    - api.github.com

Also update the inline reference on the same page (network.allowed-domains) to network.allowed.

workshop/side-quest-17-07-repo-poisoning.md:180

Rule violated: Incorrect frontmatter key name (same as the code block above)

Offending text:

- Set `network.allowed-domains` to block exfiltration to attacker-controlled destinations.

Suggested fix: Rename to network.allowed to match the actual schema:

- Set `network.allowed` to block exfiltration to attacker-controlled destinations.