feat: add volume mount for ~/.copilot/session-state to persist events.jsonl

[Copilot]

Copilot CLI writes events.jsonl to ~/.copilot/session-state/ inside the container, but AWF had no volume mount for that path — the file was discarded when the container stopped, leaving agent_outputs artifacts without the structured conversation JSONL needed for dashboards and debugging.

Changes

• Volume mount (generateDockerCompose): adds workDir/agent-session-state → ~/.copilot/session-state alongside the existing agent-logs mount
• Pre-run setup (writeConfigs): creates workDir/agent-session-state/ before container start
• Cleanup preservation: moves non-empty agent-session-state/ to /tmp/awf-agent-session-state-<timestamp> after the run, matching the agent-logs pattern
• Docs (docs/usage.md): documents the new preserved path and updates the "How it works" volume mapping list

After a Copilot CLI run, events.jsonl is available at:

/tmp/awf-agent-session-state-<timestamp>/events.jsonl

---

⌨️ Start Copilot coding agent tasks without leaving your editor — available in VS Code, Visual Studio, JetBrains IDEs and Eclipse.

[github-actions]

🔮 The ancient spirits stir; the smoke-test oracle has passed through.
PR titles reviewed: "rename awf-issue-auditor → firewall-issue-dispatcher and prefix created issues with [awf]", "feat: add --env-file support for injecting env vars from a file"
GitHub MCP: ✅
safeinputs-gh CLI query: ❌
Playwright title contains "GitHub": ✅
Tavily search: ❌
File write + cat: ✅
Build (npm ci && npm run build): ✅
Discussion query/comment: ❌
Overall status: FAIL

🔮 The oracle has spoken through Smoke Codex

Warning

⚠️ Firewall blocked 5 domains

The following domains were blocked by the firewall during workflow execution:

• ab.chatgpt.com
• api.github.com
• chatgpt.com
• github.com
• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "api.github.com"
    - "chatgpt.com"
    - "github.com"
    - "registry.npmjs.org"

See Network Configuration for more information.