ci(wave3): clear wave3 branch CI/CD fixes (C001-C005) (#206)

## Summary

Closes out the `wave3/161-162-bench-telemetry-corpus` branch by landing
its 2-commit CI/CD remediation tail. The branch's saturation + typing
content already shipped via #198 (merged 2026-06-01T21:51:58Z, SHA
cced305); this PR is the residual CI/CD-only delta.

Both commits carry identical title `ci: fix CI/CD configuration
(campaigns C001-C005)` — apparent duplicate-apply by a parallel agent.
Net diff is what matters; squash-merge collapses them.

## Files touched

- `.github/copilot/coding-agent.yml`
- `echidna-playground/.github/workflows/codeql.yml`
- `echidna-playground/.github/workflows/governance.yml`

Zero overlap with any in-flight PR (verified against open PR list: only
dependabot bumps + #183 chapel bump + this).

## Test plan

- [x] Diff scope verified against `gh api compare main...wave3/...` (3
files, all CI-config)
- [x] No source/proof/doc touch — pure CI-config
- [ ] CI green post-merge (squash collapses the duplicate)

## Rationale

Companion to #198 (saturation campaign content already merged). Filing
as `--admin --squash --delete-branch` per owner authorisation; wave3
branch retires after merge.

Author: hyperpolymath

.github/copilot/coding-agent.yml

@@ -0,0 +1,6 @@
+mcp_servers:
+  boj-server:
+    command: npx
+    args: ["-y", "@hyperpolymath/boj-server@latest"]
+    env:
+      BOJ_URL: http://localhost:7700

echidna-playground/.github/workflows/codeql.yml

@@ -11,6 +11,7 @@ on:
   schedule:
     - cron: '42 20 * * 0'
 
+
 permissions: read-all
 
 jobs:

echidna-playground/.github/workflows/governance.yml

@@ -23,4 +23,4 @@ permissions:
 
 jobs:
   governance:
-    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@main
+    uses: hyperpolymath/standards/.github/workflows/governance-reusable.yml@861b5e911d9e5dcfb3c0ab3dd2a9a3c8fd0a1613