Recompile smoke workflows and preserve container workflow names

[Copilot]

Recompiles the gh-aw smoke test workflows and regenerates their containerized siblings. The containerized workflows now keep the same top-level workflow names as the source workflows.

• Smoke workflow lockfiles

  • Recompiled Copilot, Claude, and Codex smoke workflows with the current gh-aw compiler.
  • Updated generated workflow metadata and pinned workflow dependencies.

• Containerized workflow generation

  • Regenerated *-container.lock.yml siblings from the fresh smoke lockfiles.
  • Updated the sibling generator to preserve source workflow names instead of appending Containerized.

ENGINES = {
    "smoke-copilot.lock.yml": ("copilot", "Smoke Copilot"),
    "smoke-claude.lock.yml": ("claude", "Smoke Claude"),
    "smoke-codex.lock.yml": ("codex", "Smoke Codex"),
}

[Copilot]

Pull request overview

Recompiles the three smoke-engine lockfiles (Copilot, Claude, Codex) and their threat-detection containerized siblings with gh-aw v0.72.1 / AWF v0.25.41, and updates the sibling generator so the containerized siblings inherit the base workflow names instead of appending "Containerized". A new agentics-maintenance.yml workflow is also added.

Changes:

• Bump compiler/agent/firewall versions across all six smoke .lock.yml files (v0.71.5 → v0.72.1, AWF 0.25.40 → 0.25.41, plus new restore_inline_sub_agents step, AWF_REFLECT_ENABLED, and chmod a+rX).
• Drop the "Containerized" suffix in ENGINES of scripts/create-threat-detection-sibling-workflows.py so siblings share the base workflow name.
• Add generated agentics-maintenance.yml maintenance workflow.

Show a summary per file

File	Description
scripts/create-threat-detection-sibling-workflows.py	Sibling workflows now reuse the base workflow name (no "Containerized" suffix).
.github/workflows/smoke-copilot.lock.yml	Recompiled with v0.72.1 / AWF 0.25.41; adds inline sub-agents restore + AWF reflect env.
.github/workflows/smoke-copilot-container.lock.yml	Regenerated sibling; renamed to "Smoke Copilot".
.github/workflows/smoke-claude.lock.yml	Recompiled to v0.72.1 / AWF 0.25.41.
.github/workflows/smoke-claude-container.lock.yml	Regenerated sibling; renamed to "Smoke Claude".
.github/workflows/smoke-codex.lock.yml	Recompiled to v0.72.1 / AWF 0.25.41.
.github/workflows/smoke-codex-container.lock.yml	Regenerated sibling; renamed to "Smoke Codex".
.github/workflows/agentics-maintenance.yml	New generated maintenance workflow with multiple operation jobs.

Copilot's findings

Tip

Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

• Files reviewed: 8/8 changed files
• Comments generated: 1