[auto-update] Sync workflows from gh-aw

[github-actions]

Summary

This PR synchronizes agentic workflows from the upstream github/gh-aw repository to keep our workflows up to date with the latest improvements and best practices.

Workflows Updated

🩺 CI Doctor (workflows/ci-doctor.md)

• Added stop-after: +1mo to prevent indefinite execution
• Enhanced safe-outputs configuration with custom messages, expiration, and issue closing
• Added explicit permissions instead of read-all
• Added web-search tool and GitHub actions toolset
• Updated engine configuration to use gpt-5.1-codex-mini
• Enhanced investigation protocol with noop tool for successful runs
• Added filesystem-safe timestamp requirements for artifact storage
• Added phase for closing duplicate issues
• Improved instructions for pattern storage and knowledge building
• Added imports: [shared/mood.md]

🎩 Q - Workflow Optimizer (workflows/q.md)

• Updated name and description with James Bond theme
• Added discussions permission and roles configuration
• Added serena tool for Go code analysis
• Enhanced safe-outputs with reviewers and custom messages
• Added strict mode validation
• Updated investigation protocol to use gh-aw MCP server instead of direct CLI
• Improved workflow improvement guidance with concrete examples
• Enhanced compilation validation requirements
• Added imports: [shared/mood.md]

📋 Plan Command (workflows/plan.md)

• Updated safe-outputs configuration with expiration, new labels (cookie), and grouping
• Changed title-prefix from "[task]" to "[plan]"
• Improved instructions for analyzing comment content
• Added imports: [shared/mood.md]

📊 Shared: Reporting (workflows/shared/reporting.md)

• Updated with latest reporting templates and patterns

🎭 Shared: Mood (NEW) (workflows/shared/mood.md)

• Added new shared workflow for consistent messaging and tone
• Content: "focus on quality, security, documentation"

Key Improvements

1. Better Error Handling: Enhanced noop tool usage and duplicate issue detection
2. Improved Security: More granular permissions instead of read-all
3. Enhanced UX: Custom messages for workflow status updates with emojis
4. Stricter Validation: Added strict mode and better compilation requirements
5. Resource Management: Added expiration times and stop-after limits
6. Modularity: Added shared mood configuration imported by multiple workflows

Source Information

Workflows synced from: github/gh-aw repository

• Source path: .github/workflows/
• Shared workflows path: .github/workflows/shared/

Note

Lock files (.lock.yml) are intentionally excluded from this sync - they will be generated automatically during the compilation process.

Testing

These are source workflow files (.md format). They will need to be compiled to .lock.yml files before execution. The CI system will handle this automatically.

AI generated by Daily Workflow Sync from github/gh-aw