🐛 Fix regression in YAML parsing

[stoe]

Fix workflow YAML parsing and add regression coverage

Summary

Ensures Workflow.getWorkflow() returns a fully parsed YAML object rather than a pending Promise. Previously, the un-awaited getYaml() caused downstream extraction (listeners, permissions, runsOn, secrets, vars, uses) to produce empty sets in reports.

Problem

• yaml field in workflow objects was a Promise.
• Report extraction logic expected a plain object and silently produced empty result sets.
• No regression test guarded this contract.

What Changed

• Added await this.getYaml() in src/github/workflow.js.
• Added a regression unit test asserting result.yaml is not a Promise.
• Added an end-to-end report extraction test confirming all extraction sets are populated from realistic workflow YAML.
• Escaped ${{ secrets.* }} / ${{ vars.* }} in test fixture string to avoid template interpolation issues.

Verification

• All Jest suites pass (216 tests).
• Coverage remains high; regression path now protected at both unit and integration levels.

Impact / Risk

Low. Change is additive and narrows a previously loose contract (Promise vs object). No public API shape changes; only internal correctness improvement.

Performance

Negligible difference — await was already required for actual use; now made explicit before returning.

Changelog

• Fixed: Workflow YAML now parsed eagerly (no dangling Promise).
• Added: Regression tests for YAML materialization and extraction completeness.

[Copilot]

Pull Request Overview

This PR fixes a regression in workflow YAML parsing where Workflow.getWorkflow() was returning a Promise object instead of a parsed YAML object, causing downstream extraction logic to produce empty result sets.

• Fixed workflow YAML parsing by awaiting getYaml() before returning the result
• Added regression tests to ensure YAML is properly parsed and extraction sets are populated
• Added end-to-end test coverage for report extraction functionality

Reviewed Changes

Copilot reviewed 3 out of 4 changed files in this pull request and generated 2 comments.

File	Description
src/github/workflow.js	Fixed YAML parsing by adding await to getYaml() call
test/github/workflow.test.js	Added regression test to verify yaml field is not a Promise
test/report/report-extraction.test.js	Added integration test for end-to-end extraction verification

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}