chore: clarify agent session instructions

[mnkiefer]

• Adds preferred Copilot agent session handoff to campaign orchestration
• Simplifies security alert burndown workflow to focus on Dependabot PRs

[mnkiefer]

@copilot fix lint errors

[Copilot]

@mnkiefer I've opened a new pull request, #12318, to work on those changes. Once the pull request is ready, I'll request review from you.

[github-actions]

🛡️ Security Posture Analysis

This PR simplifies the security alert burndown workflow by removing code scanning and secret scanning capabilities. While this doesn't weaken security controls, it does reduce security monitoring capabilities.

🟡 GitHub Toolset: Reduced Security Monitoring Capability

Location: .github/workflows/security-alert-burndown.md:15

Change Detected:

 tools:
   github:
-    toolsets: [repos, issues, pull_requests, code_security]
+    toolsets: [repos, issues, pull_requests]

Security Impact:

• Removes access to code scanning alerts via the GitHub MCP server
• The workflow now focuses exclusively on Dependabot PRs
• Code scanning and secret scanning alerts are no longer tracked by this workflow

Context: Based on the PR description and workflow changes, this appears to be an intentional simplification to focus the workflow on Dependabot PRs only. The workflow instructions have been correspondingly updated to remove Steps 2-3 (code/secret scanning discovery) and Step 4 (alert-to-issue resolution).

Recommendation:

• ✅ If the intent is to focus exclusively on Dependabot PRs, this change is appropriate
• ⚠️ However, ensure that code scanning and secret scanning alerts are being monitored by another workflow or process
• 📝 Consider documenting why code scanning monitoring was removed (if not already documented in the issue tracker)

---

Summary

Category	Severity	Count
GitHub Toolset	🟡 Medium	1

Note: This change reduces monitoring capabilities but doesn't weaken security controls. It appears intentional based on the PR description ("Simplifies security alert burndown workflow to focus on Dependabot PRs"). Verify that code/secret scanning alerts are monitored elsewhere.

AI generated by Security Guard Agent 🛡️

[mnkiefer]

@copilot Fix build errors

[Copilot]

@mnkiefer I've opened a new pull request, #12323, to work on those changes. Once the pull request is ready, I'll request review from you.