Fix agentic workflow compiler warnings and unblock firewall domain

[deyaaeldeen]

The issue triage workflow was getting blocked by the firewall on releaseassets.githubusercontent.com. Fixed that and while at it switched all workflows to use ecosystem identifiers (node, github, etc.) instead of raw domain names per compiler recommendation.

Also added the missing vulnerability-alerts permission to dexter and switched the docs-consistency-check schedule from a fixed cron to a fuzzy weekly schedule.

Recompiled everything with gh-aw v0.71.1, all 10 workflows now compile with 0 errors and 0 warnings.

[Copilot]

Pull request overview

This PR updates several agentic workflows to address gh-aw compiler warnings, unblock previously firewalled GitHub asset downloads (e.g., releaseassets.githubusercontent.com), and refresh the compiled lock workflows using gh-aw v0.71.1. It also adjusts permissions and scheduling behavior for specific workflows.

Changes:

• Switch workflow network allowlists from raw domain names to gh-aw ecosystem identifiers (e.g., github, node, dotnet, threat-detection) to resolve firewall/compatibility issues.
• Recompile workflow lock files with gh-aw v0.71.1 (including updated action SHAs, container pinning, and updated runtime scaffolding).
• Add vulnerability-alerts: read permission to the Dexter workflow and change docs-consistency-check scheduling to a fuzzy weekly cadence.

Reviewed changes

Copilot reviewed 15 out of 15 changed files in this pull request and generated 4 comments.

Show a summary per file

File	Description
.github/workflows/issue-triage.md	Updates network allowlist to ecosystem identifiers (node, github) to unblock GitHub asset access.
.github/workflows/issue-triage.lock.yml	Recompiled workflow output with updated gh-aw tooling/runtime and expanded allowlist resolution.
.github/workflows/fix-test-failures.md	Replaces explicit domains with ecosystem identifiers (threat-detection, github, node, dotnet).
.github/workflows/fix-test-failures.lock.yml	Recompiled workflow output with updated gh-aw tooling/runtime, including new error detection hooks and pinning updates.
.github/workflows/docs-consistency-check.md	Changes schedule expression to gh-aw “weekly on monday” friendly format (compiled to scattered cron).
.github/workflows/docs-consistency-check.lock.yml	Recompiled workflow output reflecting schedule scattering and updated gh-aw tooling/runtime.
.github/workflows/dexter.md	Adds vulnerability-alerts: read to support Dependabot/vulnerability alert access.
.github/workflows/dash.lock.yml	Recompiled workflow output with updated gh-aw tooling/runtime, pinning, and detection/run logging changes.
.github/aw/actions-lock.json	Adds/updates pinned action entries needed by refreshed workflows (e.g., actions/github-script@v9, gh-aw setup v0.71.1).