fix(ci): remove unused Setup Scripts step from update_cache_memory jobs

[Copilot]

update_cache_memory jobs fail with 401 Unauthorized because they have permissions: {} but attempt to download the private github/gh-aw/actions/setup action — which the empty token cannot access. The Setup Scripts step is entirely unused in these jobs; all subsequent steps (actions/download-artifact, actions/cache/save) use the runner token, not GITHUB_TOKEN.

Changes

• scripts/ci/postprocess-smoke-workflows.ts: Added a transformation that strips the Setup Scripts step from update_cache_memory jobs when it is immediately followed by Download cache-memory artifact, ensuring future recompiled lock files are also patched automatically
• 10 lock files (smoke-claude, smoke-copilot, smoke-codex, security-review, ci-doctor, issue-duplication-detector, pelis-agent-factory-advisor, secret-digger-{claude,codex,copilot}): Applied the transformation — Setup Scripts step removed from each update_cache_memory job

Before (broken):

update_cache_memory:
  permissions: {}
  steps:
    - name: Setup Scripts                         # 401 — token has no perms
      uses: github/gh-aw/actions/setup@v0.47.0
      with:
        destination: /opt/gh-aw/actions
    - name: Download cache-memory artifact (default)
      uses: actions/download-artifact@...

After (fixed):

update_cache_memory:
  permissions: {}
  steps:
    - name: Download cache-memory artifact (default)
      uses: actions/download-artifact@...

Original prompt

Fix the failing GitHub Actions workflow update_cache_memory
Analyze the workflow logs, identify the root cause of the failure, and implement a fix.
Job ID: 66732385167
Job URL: https://github.com/github/gh-aw-firewall/actions/runs/22984713099/job/66732385167

---

💬 Send tasks to Copilot coding agent from Slack and Teams to turn conversations into code. Copilot posts an update in your thread when it's finished.