docs: fix documentation drift — missing safe output tools in prompt + hash.rs in AGENTS.md (#417)

* Initial plan

* docs: fix documentation drift - add missing safe output tools and hash.rs

Agent-Logs-Url: https://github.com/githubnext/ado-aw/sessions/b79938ce-8102-4f1a-9074-ae486675456c

Co-authored-by: jamesadevine <4742697+jamesadevine@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: jamesadevine <4742697+jamesadevine@users.noreply.github.com>

Author: Copilot

AGENTS.md

@@ -73,6 +73,7 @@ Every compiled pipeline runs as three sequential jobs:
 │   ├── sanitize.rs       # Input sanitization for safe outputs
 │   ├── validate.rs       # Structural input validators (char allowlists, format checks, injection detectors)
 │   ├── agent_stats.rs    # OTel-based agent statistics parsing (token usage, duration, turns)
+│   ├── hash.rs           # SHA-256 utilities for safe-output file integrity
 │   ├── safeoutputs/      # Safe-output MCP tool implementations (Stage 1 → NDJSON → Stage 3)
 │   │   ├── mod.rs
 │   │   ├── add_build_tag.rs

prompts/create-ado-agentic-workflow.md

@@ -290,6 +290,8 @@ tools:
 | `create-branch` | Create a new branch from an existing ref | ✅ |
 | `create-git-tag` | Create a git tag on a repository ref | ✅ |
 | `add-build-tag` | Add a tag to an ADO build | ✅ |
+| `upload-build-attachment` | Attach a workspace file to a build (visible via REST/custom extension) | ✅ |
+| `upload-pipeline-artifact` | Publish a workspace file as a pipeline artifact (visible in Artifacts tab) | ✅ |
 | **Wiki** | | |
 | `create-wiki-page` | Create a new ADO wiki page (requires `wiki-name`) | ✅ |
 | `update-wiki-page` | Update an existing ADO wiki page (requires `wiki-name`) | ✅ |