Update MCP gateway (awmg) to v0.0.12 (#9477)

* Initial plan

* Update MCP gateway (awmg) to v0.0.12

Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>

* Update MCP Gateway schema to allow tools and env fields

The MCP Gateway v0.0.12 validates against the schema which didn't
allow the 'tools' field that Copilot engine adds to server configs.

Changes:
- Add 'tools' field to stdioServerConfig for tool filtering
- Add 'tools' and 'env' fields to httpServerConfig
- Make mount mode suffix optional (source:dest or source:dest:mode)

* Remove tools field from MCP gateway config to fix schema validation

The MCP Gateway v0.0.12 validates config against an embedded schema
that doesn't have the 'tools' field. Since the converter script
(convert_gateway_config_copilot.sh) already adds 'tools' back for
Copilot CLI, we can safely remove it from the gateway config.

Changes:
- mcp_renderer.go: Remove tools field from Docker and Remote configs
- safe_inputs_renderer.go: Remove tools field from HTTP server
- fetch.go: Remove tools field from web-fetch server
- mcp-config.go: Remove tools field from playwright, serena, safe-outputs,
  and builtin MCP server configs
- Regenerate all workflows with updated config

* Fix MCP gateway schema validation issues

1. Remove env block from safeinputs (HTTP server) - old schema
   doesn't allow env in httpServerConfig
2. Add :rw mode suffix to all mounts that were missing it - old
   schema requires source:dest:mode format

* fix: output gateway port as integer for MCP schema validation

The MCP Gateway v0.0.12 has stricter schema validation. The gateway
port must be either an integer or a variable pattern like "${VAR}".
After shell expansion in the HEREDOC, a quoted variable becomes a
string (e.g., "8080") which fails validation.

This change:
- Outputs gateway port as unquoted shell variable so it expands to
  an integer in the JSON (e.g., 8080)
- Keeps safeinputs URL using unescaped variable for proper shell
  expansion to a valid URI format

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: pass required env vars to awmg container for config validation

awmg v0.0.12 validates and resolves ${VAR} patterns in the MCP config
at startup. The safeoutputs and other MCP servers reference environment
variables like GITHUB_SERVER_URL, GITHUB_REPOSITORY, etc. in their env
blocks.

This change passes all required environment variables to the awmg Docker
container so it can resolve these variable references during config
validation.

Environment variables added:
- Safeoutputs: GH_AW_MCP_LOG_DIR, GH_AW_SAFE_OUTPUTS, etc.
- GitHub MCP: GITHUB_MCP_SERVER_TOKEN, GITHUB_MCP_LOCKDOWN
- GitHub Actions: GITHUB_REPOSITORY, GITHUB_SERVER_URL, GITHUB_SHA, etc.
- Safeinputs: GH_AW_SAFE_INPUTS_PORT, GH_AW_SAFE_INPUTS_API_KEY

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: set default values for asset-related env vars and DEFAULT_BRANCH

awmg v0.0.12 validates and resolves ${VAR} references at config load
time. The safeoutputs MCP server references GH_AW_ASSETS_BRANCH,
GH_AW_ASSETS_MAX_SIZE_KB, GH_AW_ASSETS_ALLOWED_EXTS, and DEFAULT_BRANCH
in its env config, but these were only set when upload-assets was
configured.

This change:
- Sets empty defaults for GH_AW_ASSETS_* vars when upload-assets is not
  configured
- Adds DEFAULT_BRANCH from github.event.repository.default_branch

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

* fix: increase gateway readiness timeout from 30s to 60s

The gateway may take 40-50 seconds to start when multiple MCP servers
are configured. Serena alone takes ~22 seconds to start, leaving little
time for github and playwright servers.

Increase MAX_ATTEMPTS from 30 to 60 to give the gateway sufficient time
to initialize all MCP servers.

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: Mossaka <5447827+Mossaka@users.noreply.github.com>
Co-authored-by: Jiaxiao (mossaka) Zhou <duibao55328@gmail.com>
Co-authored-by: Claude Opus 4.5 <noreply@anthropic.com>

Author: 3 people