Add api.github.com network domain to gh.md shared workflow

[Copilot]

The gh.md shared workflow provides the safeinputs-gh tool for executing GitHub CLI commands with proper authentication. However, it lacked explicit network permission for api.github.com, which the gh CLI requires to access GitHub's API.

Changes

• Added network.allowed: [api.github.com] to .github/workflows/shared/gh.md frontmatter
• Recompiled all workflows importing gh.md to propagate the network configuration to their lock files

Impact

Workflows using safeinputs-gh now have explicit firewall allowlist entries for api.github.com:

allowed_domains: ["api.github.com","defaults","github","node"]

The domain appears in both the workflow metadata and the awf --allow-domains command line flag in compiled lock files.

Original prompt

Update the gh.md agentic workflow to allow network domain "api.gitbub.com"

---

✨ Let Copilot coding agent set things up for you — coding agent works faster and does higher quality work when set up for your repo.