Store default GitHub lockdown value as a named constant

[Copilot]

The default false value for GitHub MCP server lockdown mode was hardcoded as a literal in getGitHubLockdown() rather than expressed as a named constant.

Changes

• pkg/constants/constants.go: Added DefaultGitHubLockdown = false constant alongside other DefaultGitHub* constants
• pkg/workflow/mcp_github_config.go: Updated getGitHubLockdown to return constants.DefaultGitHubLockdown instead of a bare false

// Before
return false // default to lockdown disabled

// After
return constants.DefaultGitHubLockdown

Original prompt

Update the compiler such that the default value of github lockdown to be false. (Store in constant)

---

🔒 GitHub Advanced Security automatically protects Copilot coding agent pull requests. You can protect all pull requests by enabling Advanced Security for your repositories. Learn more about Advanced Security.

[Copilot]

Pull request overview

Extracts the hardcoded false default for GitHub MCP server lockdown mode into a named constant.

Changes:

• Added DefaultGitHubLockdown constant and updated getGitHubLockdown to use it

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
pkg/constants/constants.go	Added DefaultGitHubLockdown = false constant
pkg/workflow/mcp_github_config.go	Updated getGitHubLockdown to return the new constant

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

You can also share your feedback on Copilot code review. Take the survey.