fix: add node ecosystem to smoke-codex network allow-list

The Smoke Codex workflow asks the agent to run `npm ci && npm run build`
(step 8), but `registry.npmjs.org` was not in the allowed domains list.
All 8 npm requests were blocked by the firewall, causing the agent to
fail before it could call `add_comment` (the required safe output).

Add `node` to `network.allowed` so npm registry traffic is permitted.

Co-Authored-By: Claude Opus 4.6 (1M context) <noreply@anthropic.com>

Author: Mossaka

.github/aw/actions-lock.json

@@ -40,6 +40,11 @@
       "version": "v0.63.0",
       "sha": "9128d2542bbf1bdfec94dabeaf3e1d3c0d402577"
     },
+    "github/gh-aw-actions/setup@v0.64.2": {
+      "repo": "github/gh-aw-actions/setup",
+      "version": "v0.64.2",
+      "sha": "c7a6a831a24a1273d2da068d5a612b6df00bb5e0"
+    },
     "github/gh-aw-actions/setup@v0.64.5": {
       "repo": "github/gh-aw-actions/setup",
       "version": "v0.64.5",