Add node ecosystem identifier to Copilot workflows with firewall (#3644)

* Initial plan

* Add node ecosystem identifier to 12 workflows needing npm access

Updated all workflows with firewall:true and engine:copilot to include 'node'
in their network allowed list. This enables npm registry access for Copilot CLI
which requires registry.npmjs.org.

Workflows updated:
- artifacts-summary.md
- changeset.md
- copilot-pr-nlp-analysis.md
- copilot-pr-prompt-analysis.md
- daily-news.md
- daily-repo-chronicle.md
- dev.firewall.md
- firewall.md
- mcp-inspector.md
- research.md
- smoke-copilot.md
- weekly-issue-summary.md

All workflows compile successfully with 'gh aw compile --strict'.

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>

Author: Copilot

.github/workflows/artifacts-summary.lock.yml

@@ -8,6 +8,9 @@ permissions:
   actions: read
 engine: copilot
 network:
+  allowed:
+    - defaults
+    - node
   firewall: true
 tools:
   edit:

.github/workflows/artifacts-summary.md

@@ -19,6 +19,9 @@ safe-outputs:
     engine: false
 timeout-minutes: 20
 network:
+  allowed:
+    - defaults
+    - node
   firewall: true
 tools:
   bash:

.github/workflows/changeset.lock.yml

@@ -18,6 +18,7 @@ network:
   allowed:
     - defaults
     - python
+    - node
   firewall: true
 
 safe-outputs:

.github/workflows/changeset.md

@@ -15,6 +15,9 @@ permissions:
 engine: copilot
 
 network:
+  allowed:
+    - defaults
+    - node
   firewall: true
 
 safe-outputs: