fix(workflows): broaden allowed-files glob to cover flat tests/safe-outputs layout (#871)

The previous allowed-files entry only matched
tests/safe-outputs/<dir>/*.lock.yml (the ** wildcard requires at least one
intermediate directory), so the flat tests/safe-outputs/<name>.lock.yml
fixtures were rejected by the create_pull_request safe-output policy.

Add the flat glob alongside the recursive one so both layouts are
covered.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: jamesadevine

.github/workflows/recompile-safe-output-fixtures.lock.yml

@@ -24,6 +24,7 @@ safe-outputs:
     title-prefix: "chore(workflows): "
     max: 1
     allowed-files:
+      - "tests/safe-outputs/*.lock.yml"
       - "tests/safe-outputs/**/*.lock.yml"
   close-pull-request:
     required-title-prefix: "chore(workflows): recompile safe-output fixtures"