Harden workflow shell permissions by replacing wildcard bash allow-lists with explicit command sets#27135

Copilot wants to merge 2 commits intomaingithub/gh-aw:mainfrom

copilot/deep-report-audit-replace-bash-wildcardsgithub/gh-aw:copilot/deep-report-audit-replace-bash-wildcardsCopy head branch name to clipboard