fix(workflows): broaden allowed-files glob to cover flat tests/safe-outputs layout

[jamesadevine]

Summary

Fixes the safe-output policy failure observed when the agent tried to open the recompile PR:

Error: Cannot create pull request: patch modifies files outside the
allowed-files list (tests/safe-outputs/add-build-tag.lock.yml, ...,
tests/safe-outputs/upload-workitem-attachment.lock.yml).

The previous allowed-files entry was tests/safe-outputs/**/*.lock.yml. The ** segment in gh-aw's glob matcher requires at least one intermediate directory level, so it only covered tests/safe-outputs/<dir>/*.lock.yml. The actual fixtures live flat at tests/safe-outputs/<name>.lock.yml, so every recompiled file was rejected and the PR creation failed.

This adds the flat glob alongside the recursive one:

allowed-files:
  - "tests/safe-outputs/*.lock.yml"
  - "tests/safe-outputs/**/*.lock.yml"

The recursive glob is kept so the policy still works if a future test fixture is moved into a subdirectory.

Test plan

• Cross-checked the failing safe-output error message against the new glob list — every rejected file matches tests/safe-outputs/*.lock.yml.
• Lock file regenerated with gh aw compile recompile-safe-output-fixtures.
• Will be exercised end-to-end on the next ado-aw release.

Follows from #868 and #869.