Fix test-proxy.md to use automatic comment creation instead of manual GitHub tools (#190)

* Update test-proxy.md to use comments instead of creating issues

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

* changed the instruction to comment on PR instead of raising a new issue

Signed-off-by: Jiaxiao Zhou <duibao55328@gmail.com>

* Remove create_comment tool and add inline PR number as requested in review comments

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

---------

Signed-off-by: Jiaxiao Zhou <duibao55328@gmail.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>
Co-authored-by: Jiaxiao Zhou <duibao55328@gmail.com>

Author: Copilot

.github/workflows/test-proxy.lock.yml

@@ -4,8 +4,8 @@ on:
     branches: [ "main" ]
   workflow_dispatch:
 
-permissions:
-  issues: write # needed to write the output report to an issue
+output:
+  issue_comment: {}
 
 tools:
   fetch:
@@ -21,8 +21,6 @@ tools:
 
   github:
     allowed:
-      - "create_issue"
-      - "create_comment"
       - "get_issue"
 
 engine: claude
@@ -44,10 +42,14 @@ Test the MCP network permissions feature to validate that domain restrictions ar
 - Verify that all blocked requests fail at the network level (proxy enforcement)
 - Confirm that only example.com is accessible through the Squid proxy
 
-Create a GitHub issue with the test results, documenting:
+## Reporting Instructions
+
+If there are any failures, security issues, or unexpected behaviors:
+
+- Write a detailed report to ${{ env.GITHUB_AW_OUTPUT }} documenting:
 - Which domains were successfully accessed vs blocked
 - Error messages received for blocked domains  
-- Confirmation that network isolation is working correctly
 - Any security observations or recommendations
+- Specific failure details that need attention
 
-The test should demonstrate that MCP containers are properly isolated and can only access explicitly allowed domains through the network proxy.
+The test results will be automatically posted as a comment on PR #${{ github.event.pull_request.number }}.