Update gh-aw to latest main and recompile agentic workflows

[Copilot]

Picks up github/gh-aw#28960 by re-pinning gh-aw to the current head of main and regenerating the lock files.

Changes

• copilot-setup-steps.yml: bump GH_AW_REF from a91e3d2 → c439037c57f5af1ada2f1d8c49e0d06d192ec698; updated the rationale comment to reference both #28472 and #28960.
• autoloop.lock.yml / evergreen.lock.yml: regenerated via gh aw compile. Notable upstream deltas:
  • firewall images 0.25.28 → 0.25.29
  • gh-aw-mcpg v0.3.0 → v0.3.1
  • github-mcp-server now digest-pinned
  • actions/setup is now sparse-checked-out from github/gh-aw and consumed locally instead of referenced as github/gh-aw/actions/setup@<sha>
  • new mcp_cli_tools_prompt.md injected into the agent prompt

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/actions/github-script/git/ref/tags/v9
  • Triggering command: /usr/bin/gh gh api /repos/actions/github-script/git/ref/tags/v9 --jq [.object.sha, .object.type] | @tsv (http block)
• https://api.github.com/repos/github/gh-aw/commits/main
  • Triggering command: /usr/bin/curl curl -s REDACTED (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)