FIX: daily-repo-status — bump pinned awf to v0.25.40

[sumitmsft]

Problem

gh aw compile previously pinned awf (the gh-aw-firewall binary) to v0.25.28, which was never published as a GitHub release (gap between v0.25.20 and v0.25.40). The install_awf_binary step fails with:

curl: (22) The requested URL returned error: 404
Error: Process completed with exit code 22.
```n
## Fix

Recompiled the workflow with the latest gh-aw extension (v0.71.5), which pins **v0.25.40** — a valid published release.

## Files changed

- .github/workflows/daily-repo-status.lock.yml — regenerated lock with valid awf pin
- .github/aw/actions-lock.json — regenerated

No functional change to the workflow prompt or behavior.

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 85.72%. Comparing base (4f8f2d6) to head (d0f400f).

Additional details and impacted files

@@           Coverage Diff           @@
##              dev    #1614   +/-   ##
=======================================
  Coverage   85.72%   85.72%           
=======================================
  Files          23       23           
  Lines        7210     7210           
=======================================
  Hits         6181     6181           
  Misses       1029     1029           

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.