fix(ci): recompile ci-doctor and add missing workflows

[Copilot]

CI Doctor run 22434930177 failed at "Install GitHub Copilot CLI" — the lock file was stale (gh-aw v0.47.0, Copilot CLI 0.0.411).

• Recompile ci-doctor.lock.yml — v0.47.0 → v0.50.5, Copilot CLI 0.0.411 → 0.0.418, post-processed for local builds
• Add 4 missing monitored workflows to ci-doctor.md — Chroot Integration Tests, Integration Tests, Smoke Chroot, Smoke Codex were unmonitored
• Fix postprocess-smoke-workflows.ts — remove reference to deleted smoke-gemini.lock.yml that was causing the post-processing script to error

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.50.5
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.50.5 --jq .object.sha (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)

Original prompt

---

This section details on the original issue you should resolve

<issue_title>[agentics] CI Doctor failed</issue_title>
<issue_description>### Workflow Failure

Workflow: CI Doctor
Branch: main
Run URL: https://github.com/github/gh-aw-firewall/actions/runs/22434930177

Action Required

Option 1: Assign this issue to agent using agentic-workflows

Assign this issue to the agentic-workflows agent to automatically debug and fix the workflow failure.

Option 2: Manually invoke the agent

Debug this workflow failure using the agentic-workflows agent:

/agent agentic-workflows debug the agentic workflow ci-doctor failure in https://github.com/github/gh-aw-firewall/actions/runs/22434930177

Generated from CI Doctor

• expires on Mar 5, 2026, 8:58 AM UTC

<agent_instructions>debug this and fix it </agent_instructions>

Comments on the Issue (you are @copilot in this section)

Custom agent used: agentic-workflows
GitHub Agentic Workflows (gh-aw) - Create, debug, and upgrade AI-powered workflows with intelligent prompt routing

• Fixes [agentics] CI Doctor failed #1061

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[github-actions]

✅ Coverage Check Passed

Overall Coverage

Metric	Base	PR	Delta
Lines	82.03%	82.18%	📈 +0.15%
Statements	82.01%	82.15%	📈 +0.14%
Functions	82.50%	82.50%	➡️ +0.00%
Branches	74.20%	74.29%	📈 +0.09%

📁 Per-file Coverage Changes (1 files)

File	Lines (Before → After)	Statements (Before → After)
src/docker-manager.ts	83.1% → 83.7% (+0.56%)	82.4% → 83.0% (+0.54%)

---

Coverage comparison generated by scripts/ci/compare-coverage.ts

[Copilot]

Pull request overview

This PR fixes a stale CI Doctor workflow lock file and adds missing workflow monitors. The CI Doctor workflow failed because it was using outdated versions of gh-aw (v0.47.0) and GitHub Copilot CLI (0.0.411). The PR recompiles the lock file with updated versions, adds 4 previously unmonitored workflows to the monitoring list, and fixes a bug in the post-processing script that referenced a deleted workflow file.

Changes:

• Upgraded gh-aw from v0.47.0 to v0.50.5 and Copilot CLI from 0.0.411 to 0.0.418
• Added 4 missing workflows to CI Doctor's monitoring list: Chroot Integration Tests, Integration Tests, Smoke Chroot, and Smoke Codex
• Fixed postprocess-smoke-workflows.ts to remove reference to deleted smoke-gemini.lock.yml file

Reviewed changes

Copilot reviewed 3 out of 3 changed files in this pull request and generated no comments.

File	Description
scripts/ci/postprocess-smoke-workflows.ts	Removed reference to deleted smoke-gemini.lock.yml workflow that was causing the post-processing script to fail
.github/workflows/ci-doctor.md	Added 4 missing workflows to the monitored workflows list
.github/workflows/ci-doctor.lock.yml	Recompiled lock file with gh-aw v0.50.5, updated all version references, refactored threat detection to run inline, updated prompt building, and added new safe output tools

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.