Security: exclude all secret-bearing env vars from agent container via AWF --exclude-env#23360

lpcox merged 4 commits intomaingithub/gh-aw:mainfrom

copilot/fix-env-all-exposes-secretsgithub/gh-aw:copilot/fix-env-all-exposes-secretsCopy head branch name to clipboard