fix: recompile traffic-updater workflow with gh-aw v0.68.1

Same MCP policy fix as course-updater - pin Copilot CLI version and
upgrade firewall/gateway components to prevent MCP server blocking.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: DanWahlin