feat: add write-sink guard policy to all non-GitHub MCP servers configured by gateway#21005

lpcox merged 3 commits intomaingithub/gh-aw:mainfrom

copilot/update-gh-aw-renderer-configgithub/gh-aw:copilot/update-gh-aw-renderer-configCopy head branch name to clipboard