chore: bump shared/apm.md to microsoft/apm-action@v1.4.2

[danielmeppiel]

Summary

Bumps microsoft/apm-action from v1.4.1 to v1.4.2 in our shared agentic-workflow shared/apm.md.

v1.4.2 fixes the restore-mode workspace pollution that caused #901 and the CI failure surfaced in #889. With v1.4.2, restore mode installs APM and uses apm unpack to extract bundles, writing only files declared in the lockfile's deployed_files instead of overwriting tracked apm.lock.yaml / apm.yml / apm_modules in the caller's git workspace.

Closes #902.

Changes

• .github/workflows/shared/apm.md — bump both pack and restore steps to @v1.4.2 (lines 49 and 77).
• .github/workflows/pr-review-panel.lock.yml — regenerated via gh aw compile (SHA pin updated to 9fe9337…).
• .github/aw/actions-lock.json — SHA pin updated.

No other workflow files needed regeneration; only pr-review-panel consumes shared/apm.md.

Verification

• gh aw compile ran cleanly (4 workflows, 0 errors).
• Drift unrelated to this change in other lockfiles (cli-consistency-checker, daily-doc-updater, daily-test-improver, agentics-maintenance) was reverted to keep this PR minimal.
• Upstream release: https://github.com/microsoft/apm-action/releases/tag/v1.4.2
• Upstream PR: fix(restore): install APM and unpack via apm CLI to avoid dirtying workspace apm-action#27 (with live integration test test-restore-clean-workspace reproducing the feat(audit): close audit-blindness gap for local .apm/ content (#887) #889 scenario end-to-end).

Why pin a patch version, not @v1

Supply-chain hygiene: immutable patch pins survive a tag rewrite. The v1 floating tag has already been retagged to v1.4.2, so consumers pinned to @v1 are also on the fix.

[Copilot]

Pull request overview

Bumps the pinned microsoft/apm-action version used by the shared agentic-workflow template to pick up the v1.4.2 restore-mode fix (clean workspace / avoid overwriting tracked files), and regenerates the dependent gh-aw lock artifacts.

Changes:

• Update .github/workflows/shared/apm.md to use microsoft/apm-action@v1.4.2 for both pack and restore steps.
• Regenerate .github/workflows/pr-review-panel.lock.yml to reflect the new pinned action SHA/version.
• Update .github/aw/actions-lock.json to pin microsoft/apm-action@v1.4.2 to the new SHA.

Show a summary per file

File	Description
.github/workflows/shared/apm.md	Bumps microsoft/apm-action from v1.4.1 to v1.4.2 in pack + restore.
.github/workflows/pr-review-panel.lock.yml	Updates the compiled workflow lock to the new microsoft/apm-action SHA/version.
.github/aw/actions-lock.json	Updates the action lock entry for microsoft/apm-action@v1.4.2 and its SHA.

Copilot's findings

• Files reviewed: 3/3 changed files
• Comments generated: 0