diff --git a/.github/workflows/downstream-users.lock.yml b/.github/workflows/downstream-users.lock.yml
index 76c00a73..c746b295 100644
--- a/.github/workflows/downstream-users.lock.yml
+++ b/.github/workflows/downstream-users.lock.yml
@@ -36,7 +36,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"fb6d0081e858bc1c87b90fdb2778ed61764a2e78c55707312a68639281f08357"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"fd8e309b4c8bdfba7b1b5c19634e4a78e39ab4eb6ad1c07a559eb3dd2e1b7ebe"}
 
 name: "Internal: Downstream Users"
 "on":
diff --git a/.github/workflows/gh-aw-bug-exterminator.lock.yml b/.github/workflows/gh-aw-bug-exterminator.lock.yml
index bf36d865..62b860c5 100644
--- a/.github/workflows/gh-aw-bug-exterminator.lock.yml
+++ b/.github/workflows/gh-aw-bug-exterminator.lock.yml
@@ -37,7 +37,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"45cf942b227f987fa2c177ada5793842c9c740a9a0240beeee6ad4cfa23f9fea"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"56c13c25ffea3a24bf941ef44a3eb2a6089d24d042fb65be37bab555e73643c8"}
 
 name: "Gh Aw Bug Exterminator"
 "on":
@@ -64,6 +64,11 @@ name: "Gh Aw Bug Exterminator"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -437,8 +442,6 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    concurrency:
-      group: "gh-aw-copilot-${{ github.workflow }}"
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -1540,7 +1543,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-bug-exterminator.md b/.github/workflows/gh-aw-bug-exterminator.md
index c6e4d027..eb01ae78 100644
--- a/.github/workflows/gh-aw-bug-exterminator.md
+++ b/.github/workflows/gh-aw-bug-exterminator.md
@@ -47,6 +47,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-code-duplication-fixer.lock.yml b/.github/workflows/gh-aw-code-duplication-fixer.lock.yml
index 898c6c5f..0bb2643e 100644
--- a/.github/workflows/gh-aw-code-duplication-fixer.lock.yml
+++ b/.github/workflows/gh-aw-code-duplication-fixer.lock.yml
@@ -37,7 +37,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"c9fc297959faa74e43f0f19feb0aa061f4bfd52f5270de2aa7e445eae583b31e"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"c136593b529cf18b1512b1fed6f699a9b23faf51ff21fa94e803a902fbf21987"}
 
 name: "Code Duplication Fixer"
 "on":
@@ -64,6 +64,11 @@ name: "Code Duplication Fixer"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -439,8 +444,6 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    concurrency:
-      group: "gh-aw-copilot-${{ github.workflow }}"
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -1550,7 +1553,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-code-duplication-fixer.md b/.github/workflows/gh-aw-code-duplication-fixer.md
index 81d0cc84..4760b67b 100644
--- a/.github/workflows/gh-aw-code-duplication-fixer.md
+++ b/.github/workflows/gh-aw-code-duplication-fixer.md
@@ -48,6 +48,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-code-simplifier.lock.yml b/.github/workflows/gh-aw-code-simplifier.lock.yml
index de954ab4..5a1a3445 100644
--- a/.github/workflows/gh-aw-code-simplifier.lock.yml
+++ b/.github/workflows/gh-aw-code-simplifier.lock.yml
@@ -37,7 +37,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"1f851ee8e8378d90735e9163608817728108b4f7d049c2ad35b8241978dedc80"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"73b5e3dc6eaf8e5c9d6d95f8b494783ef9ccd17b8c749799cff1bef93bd6de98"}
 
 name: "Code Simplifier"
 "on":
@@ -64,6 +64,11 @@ name: "Code Simplifier"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -438,8 +443,6 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    concurrency:
-      group: "gh-aw-copilot-${{ github.workflow }}"
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -1541,7 +1544,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-code-simplifier.md b/.github/workflows/gh-aw-code-simplifier.md
index 920912ec..e4c0f489 100644
--- a/.github/workflows/gh-aw-code-simplifier.md
+++ b/.github/workflows/gh-aw-code-simplifier.md
@@ -47,6 +47,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-fragments/safe-output-create-pr.md b/.github/workflows/gh-aw-fragments/safe-output-create-pr.md
index 7f4abe11..c6d27cb4 100644
--- a/.github/workflows/gh-aw-fragments/safe-output-create-pr.md
+++ b/.github/workflows/gh-aw-fragments/safe-output-create-pr.md
@@ -17,6 +17,7 @@ safe-inputs:
 safe-outputs:
   create-pull-request:
     draft: ${{ inputs.draft-prs }}
+    github-token-for-extra-empty-commit: ${{ inputs.github-token-for-extra-empty-commit }}
 ---
 
 Before calling `create_pull_request`, call `ready_to_make_pr` and apply its checklist.
diff --git a/.github/workflows/gh-aw-fragments/safe-output-push-to-pr.md b/.github/workflows/gh-aw-fragments/safe-output-push-to-pr.md
index 4c63410f..712a2ba4 100644
--- a/.github/workflows/gh-aw-fragments/safe-output-push-to-pr.md
+++ b/.github/workflows/gh-aw-fragments/safe-output-push-to-pr.md
@@ -16,6 +16,7 @@ safe-inputs:
       return result;
 safe-outputs:
   push-to-pull-request-branch:
+    github-token-for-extra-empty-commit: ${{ inputs.github-token-for-extra-empty-commit }}
 ---
 
 Before calling `push_to_pull_request_branch`, call `ready_to_make_pr` and apply its checklist.
diff --git a/.github/workflows/gh-aw-issue-fixer.lock.yml b/.github/workflows/gh-aw-issue-fixer.lock.yml
index 90624561..f0f8bb33 100644
--- a/.github/workflows/gh-aw-issue-fixer.lock.yml
+++ b/.github/workflows/gh-aw-issue-fixer.lock.yml
@@ -38,7 +38,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"8b74b6fd69a0a375ce5dce34127bda9715081e16df190ab17204dc85529a7071"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"c1d07881b2bd62a50f096b162ff4d097214e25ff074e18682dfec1dc42209f9f"}
 
 name: "Issue Fixer"
 "on":
@@ -65,6 +65,11 @@ name: "Issue Fixer"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -1606,7 +1611,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-issue-fixer.md b/.github/workflows/gh-aw-issue-fixer.md
index 1ce2e0e0..2ae8fdf0 100644
--- a/.github/workflows/gh-aw-issue-fixer.md
+++ b/.github/workflows/gh-aw-issue-fixer.md
@@ -51,6 +51,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
   reaction: "eyes"
   roles: [admin, maintainer, write]
   bots:
diff --git a/.github/workflows/gh-aw-mention-in-issue-no-sandbox.lock.yml b/.github/workflows/gh-aw-mention-in-issue-no-sandbox.lock.yml
index 79c61b32..fefe699f 100644
--- a/.github/workflows/gh-aw-mention-in-issue-no-sandbox.lock.yml
+++ b/.github/workflows/gh-aw-mention-in-issue-no-sandbox.lock.yml
@@ -39,7 +39,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"e62d5042c93258cdae2f85fcedfe70bed7af7ae450eac5358e44de328ff89b6e"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"d8130d3d59156af046d3fff4732cde4db0e519077956a5d7c78cac7856ee14da"}
 
 name: "Mention in Issue (no sandbox)"
 "on":
@@ -66,6 +66,11 @@ name: "Mention in Issue (no sandbox)"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -1566,7 +1571,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"create_issue\":{\"max\":1},\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-mention-in-issue-no-sandbox.md b/.github/workflows/gh-aw-mention-in-issue-no-sandbox.md
index e8de6b88..a8f7ee49 100644
--- a/.github/workflows/gh-aw-mention-in-issue-no-sandbox.md
+++ b/.github/workflows/gh-aw-mention-in-issue-no-sandbox.md
@@ -52,6 +52,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-mention-in-issue.lock.yml b/.github/workflows/gh-aw-mention-in-issue.lock.yml
index 4e858b2e..e848949c 100644
--- a/.github/workflows/gh-aw-mention-in-issue.lock.yml
+++ b/.github/workflows/gh-aw-mention-in-issue.lock.yml
@@ -39,7 +39,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"eab038274f5694415a6f9dbe07ac5b42fac4aa4c956851029207d68a435498c6"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"e0cf49b37c004a6bf0b7ef3ed1586ff40c41b03e6770f049e152c936e9e1d819"}
 
 name: "Mention in Issue"
 "on":
@@ -66,6 +66,11 @@ name: "Mention in Issue"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -1697,7 +1702,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"create_issue\":{\"max\":1},\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-mention-in-issue.md b/.github/workflows/gh-aw-mention-in-issue.md
index 86859241..06117dd2 100644
--- a/.github/workflows/gh-aw-mention-in-issue.md
+++ b/.github/workflows/gh-aw-mention-in-issue.md
@@ -52,6 +52,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-mention-in-pr-by-id.lock.yml b/.github/workflows/gh-aw-mention-in-pr-by-id.lock.yml
index c6913b86..7dbc8b8f 100644
--- a/.github/workflows/gh-aw-mention-in-pr-by-id.lock.yml
+++ b/.github/workflows/gh-aw-mention-in-pr-by-id.lock.yml
@@ -42,7 +42,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"ab13f9afdf485aa303c7bddb1fb8b017ef295d7ecbaf4a6f721f2c8cf2ebff78"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"2347bd1f9b1acfcbde9bff85f8d1ca9e94c20c6306cc32332f4cd1036c94ecd1"}
 
 name: "Mention in PR by ID"
 "on":
@@ -63,6 +63,11 @@ name: "Mention in PR by ID"
         description: Maximum number of review comments the agent can create per run
         required: false
         type: string
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -1824,7 +1829,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1,\"target\":\"${{ inputs.target-pr-number }}\"},\"create_pull_request_review_comment\":{\"max\":10,\"side\":\"RIGHT\",\"target\":\"${{ inputs.target-pr-number }}\"},\"missing_data\":{},\"missing_tool\":{},\"push_to_pull_request_branch\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"if_no_changes\":\"warn\",\"max_patch_size\":1024,\"target\":\"${{ inputs.target-pr-number }}\"},\"resolve_pull_request_review_thread\":{\"max\":\"${{ inputs.resolve-pull-request-review-thread-max }}\"},\"submit_pull_request_review\":{\"max\":1,\"target\":\"${{ inputs.target-pr-number }}\"}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-mention-in-pr-by-id.md b/.github/workflows/gh-aw-mention-in-pr-by-id.md
index 03d44479..585c1be2 100644
--- a/.github/workflows/gh-aw-mention-in-pr-by-id.md
+++ b/.github/workflows/gh-aw-mention-in-pr-by-id.md
@@ -68,6 +68,11 @@ on:
         type: string
         required: false
         default: "10"
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
@@ -95,6 +100,7 @@ safe-outputs:
     target: "${{ inputs.target-pr-number }}"
   push-to-pull-request-branch:
     target: "${{ inputs.target-pr-number }}"
+    github-token-for-extra-empty-commit: ${{ inputs.github-token-for-extra-empty-commit }}
 timeout-minutes: 60
 steps:
   - name: Ensure origin refs for PR patch generation
diff --git a/.github/workflows/gh-aw-mention-in-pr-no-sandbox.lock.yml b/.github/workflows/gh-aw-mention-in-pr-no-sandbox.lock.yml
index 3311610e..5f063744 100644
--- a/.github/workflows/gh-aw-mention-in-pr-no-sandbox.lock.yml
+++ b/.github/workflows/gh-aw-mention-in-pr-no-sandbox.lock.yml
@@ -42,7 +42,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"e3419020c0872c77806a0dafad62ed921afb0f4112135764a1f7953f61061d33"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"94af0585483cac7b5cd46a47189b444e1ccb7522cfca27f2d58aeabbd9746be8"}
 
 name: "Mention in PR (no sandbox)"
 "on":
@@ -69,6 +69,11 @@ name: "Mention in PR (no sandbox)"
         description: Maximum number of review comments the agent can create per run
         required: false
         type: string
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -1760,7 +1765,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"create_pull_request_review_comment\":{\"max\":\"${{ inputs.create-pull-request-review-comment-max }}\",\"side\":\"RIGHT\"},\"missing_data\":{},\"missing_tool\":{},\"push_to_pull_request_branch\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"if_no_changes\":\"warn\",\"max_patch_size\":1024},\"resolve_pull_request_review_thread\":{\"max\":\"${{ inputs.resolve-pull-request-review-thread-max }}\"},\"submit_pull_request_review\":{\"footer\":\"if-body\",\"max\":1}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-mention-in-pr-no-sandbox.md b/.github/workflows/gh-aw-mention-in-pr-no-sandbox.md
index 98e6c110..be827b15 100644
--- a/.github/workflows/gh-aw-mention-in-pr-no-sandbox.md
+++ b/.github/workflows/gh-aw-mention-in-pr-no-sandbox.md
@@ -60,6 +60,11 @@ on:
         type: string
         required: false
         default: "10"
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-mention-in-pr.lock.yml b/.github/workflows/gh-aw-mention-in-pr.lock.yml
index 6821a48e..d6c1c744 100644
--- a/.github/workflows/gh-aw-mention-in-pr.lock.yml
+++ b/.github/workflows/gh-aw-mention-in-pr.lock.yml
@@ -42,7 +42,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"e528be4cf028fd8ce8bd43491752116e4120a662d6c020e6354188155601efce"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"734a11a13a52ac6e686bd97f9fb2ef1dde1ca28c786ed0e184264bf575b7c03c"}
 
 name: "Mention in PR"
 "on":
@@ -69,6 +69,11 @@ name: "Mention in PR"
         description: Maximum number of review comments the agent can create per run
         required: false
         type: string
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -1893,7 +1898,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"create_pull_request_review_comment\":{\"max\":\"${{ inputs.create-pull-request-review-comment-max }}\",\"side\":\"RIGHT\"},\"missing_data\":{},\"missing_tool\":{},\"push_to_pull_request_branch\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"if_no_changes\":\"warn\",\"max_patch_size\":1024},\"resolve_pull_request_review_thread\":{\"max\":\"${{ inputs.resolve-pull-request-review-thread-max }}\"},\"submit_pull_request_review\":{\"footer\":\"if-body\",\"max\":1}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-mention-in-pr.md b/.github/workflows/gh-aw-mention-in-pr.md
index cb391ec9..5de8fcb0 100644
--- a/.github/workflows/gh-aw-mention-in-pr.md
+++ b/.github/workflows/gh-aw-mention-in-pr.md
@@ -70,6 +70,11 @@ on:
         type: string
         required: false
         default: "10"
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-newbie-contributor-fixer.lock.yml b/.github/workflows/gh-aw-newbie-contributor-fixer.lock.yml
index 5d1eb292..5c326020 100644
--- a/.github/workflows/gh-aw-newbie-contributor-fixer.lock.yml
+++ b/.github/workflows/gh-aw-newbie-contributor-fixer.lock.yml
@@ -37,7 +37,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"a313bd464d565689b8f72b806e49d9d3a259e96a55aa233b25c74e54c7e4bedb"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"2f71a746b2dc039c00e952ab878b27b993066e12b2873b5dd085708632a0bc22"}
 
 name: "Newbie Contributor Fixer"
 "on":
@@ -64,6 +64,11 @@ name: "Newbie Contributor Fixer"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -440,8 +445,6 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    concurrency:
-      group: "gh-aw-copilot-${{ github.workflow }}"
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -1543,7 +1546,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-newbie-contributor-fixer.md b/.github/workflows/gh-aw-newbie-contributor-fixer.md
index 6446aff7..e76c2be1 100644
--- a/.github/workflows/gh-aw-newbie-contributor-fixer.md
+++ b/.github/workflows/gh-aw-newbie-contributor-fixer.md
@@ -48,6 +48,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-pr-actions-fixer.lock.yml b/.github/workflows/gh-aw-pr-actions-fixer.lock.yml
index 4fdb8bc3..f121db30 100644
--- a/.github/workflows/gh-aw-pr-actions-fixer.lock.yml
+++ b/.github/workflows/gh-aw-pr-actions-fixer.lock.yml
@@ -37,7 +37,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"f985cb01e1a0c39f8cdb91d9203f120a3aabdd3eec81f658eae9973e3a504748"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"44052de0fb7bc94958037f154e75ce75f98ba3035bcc149d45f6967f3a6a89e8"}
 
 name: "PR Actions Fixer"
 "on":
@@ -59,6 +59,11 @@ name: "PR Actions Fixer"
         description: Allowlisted bot actor usernames (comma-separated)
         required: false
         type: string
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -439,8 +444,6 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    concurrency:
-      group: "gh-aw-copilot-${{ github.workflow }}"
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -1540,7 +1543,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"missing_data\":{},\"missing_tool\":{},\"push_to_pull_request_branch\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"if_no_changes\":\"warn\",\"max_patch_size\":1024}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-pr-actions-fixer.md b/.github/workflows/gh-aw-pr-actions-fixer.md
index 8dc0eb7d..d128d3c3 100644
--- a/.github/workflows/gh-aw-pr-actions-fixer.md
+++ b/.github/workflows/gh-aw-pr-actions-fixer.md
@@ -46,6 +46,11 @@ on:
         type: string
         required: false
         default: ""
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-pr-review-addresser.lock.yml b/.github/workflows/gh-aw-pr-review-addresser.lock.yml
index c6c9e44a..8f58d56e 100644
--- a/.github/workflows/gh-aw-pr-review-addresser.lock.yml
+++ b/.github/workflows/gh-aw-pr-review-addresser.lock.yml
@@ -39,7 +39,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"9b2418b1915aa2f4b9ae98da4ff5d8476ef6504441bda833e4f0019aedc92832"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"d5d6d4829494704a02bfc546eb6f1d02b44ab598d88419787a7e0f1764985929"}
 
 name: "PR Review Addresser"
 "on":
@@ -61,6 +61,11 @@ name: "PR Review Addresser"
         description: Allowlisted bot actor usernames (comma-separated)
         required: false
         type: string
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -1634,7 +1639,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"missing_data\":{},\"missing_tool\":{},\"push_to_pull_request_branch\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"if_no_changes\":\"warn\",\"max_patch_size\":1024},\"reply_to_pull_request_review_comment\":{\"max\":10},\"resolve_pull_request_review_thread\":{\"max\":\"${{ inputs.resolve-pull-request-review-thread-max }}\"}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-pr-review-addresser.md b/.github/workflows/gh-aw-pr-review-addresser.md
index 41606579..b8d9cd59 100644
--- a/.github/workflows/gh-aw-pr-review-addresser.md
+++ b/.github/workflows/gh-aw-pr-review-addresser.md
@@ -52,6 +52,11 @@ on:
         type: string
         required: false
         default: "10"
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-release-update.lock.yml b/.github/workflows/gh-aw-release-update.lock.yml
index 22c8e813..1a4d193b 100644
--- a/.github/workflows/gh-aw-release-update.lock.yml
+++ b/.github/workflows/gh-aw-release-update.lock.yml
@@ -36,7 +36,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"b67d3b9f175abb92080e3b14c0c68aa1746a7ea20d75670b70fc23fef1304cbb"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"09f79ce023c1fde5cdf9e65ffc9fb4b631d1d4ecc961933ba29e18c73a55d07f"}
 
 name: "Release Update Check"
 "on":
@@ -63,6 +63,11 @@ name: "Release Update Check"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -408,8 +413,6 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    concurrency:
-      group: "gh-aw-copilot-${{ github.workflow }}"
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -1511,7 +1514,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-release-update.md b/.github/workflows/gh-aw-release-update.md
index 956dd00f..b2876268 100644
--- a/.github/workflows/gh-aw-release-update.md
+++ b/.github/workflows/gh-aw-release-update.md
@@ -46,6 +46,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-scheduled-fix.lock.yml b/.github/workflows/gh-aw-scheduled-fix.lock.yml
index 2db0d269..4602a56e 100644
--- a/.github/workflows/gh-aw-scheduled-fix.lock.yml
+++ b/.github/workflows/gh-aw-scheduled-fix.lock.yml
@@ -37,7 +37,11 @@
 #
 # inlined-imports: true
 #
+<<<<<<< copilot/expose-github-token-input
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"604c4bb3f3a33a3fdea31d9e7433048d5483ffc156c9ee6ec75a7c9100f451eb"}
+=======
 # gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"fb9cb61d1c7bc9a1ef3adc355056c47c15620699f4ae199addc698133f2b0298"}
+>>>>>>> main
 
 name: "Scheduled Fix"
 "on":
@@ -63,6 +67,11 @@ name: "Scheduled Fix"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       issue-label:
         default: ""
         description: Label to search for in open issues
@@ -1566,7 +1575,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-scheduled-fix.md b/.github/workflows/gh-aw-scheduled-fix.md
index 49f5a15b..32f9ec86 100644
--- a/.github/workflows/gh-aw-scheduled-fix.md
+++ b/.github/workflows/gh-aw-scheduled-fix.md
@@ -56,6 +56,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-small-problem-fixer.lock.yml b/.github/workflows/gh-aw-small-problem-fixer.lock.yml
index 61c48614..51cb228d 100644
--- a/.github/workflows/gh-aw-small-problem-fixer.lock.yml
+++ b/.github/workflows/gh-aw-small-problem-fixer.lock.yml
@@ -37,7 +37,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"5e03acc344c30e36c9a1dce6a565bfc64c074b037d29b9c501110d57cbefb8c5"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"0c52306a33996612b3f8ed4b62ec4ead21763b8a982a1bdb2e855739b63e50c5"}
 
 name: "Small Problem Fixer"
 "on":
@@ -64,6 +64,11 @@ name: "Small Problem Fixer"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -452,8 +457,6 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    concurrency:
-      group: "gh-aw-copilot-${{ github.workflow }}"
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -1594,7 +1597,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"add_comment\":{\"max\":1},\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-small-problem-fixer.md b/.github/workflows/gh-aw-small-problem-fixer.md
index 0e63b400..21f40493 100644
--- a/.github/workflows/gh-aw-small-problem-fixer.md
+++ b/.github/workflows/gh-aw-small-problem-fixer.md
@@ -47,6 +47,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-test-improvement.lock.yml b/.github/workflows/gh-aw-test-improvement.lock.yml
index be15c05b..1fe9ce0b 100644
--- a/.github/workflows/gh-aw-test-improvement.lock.yml
+++ b/.github/workflows/gh-aw-test-improvement.lock.yml
@@ -41,7 +41,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"6ef72d1d56c561e01f84ccfcc3cd5910ff72093b3c9771e73f1c86bb9415f3aa"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"481aa71422028cd2fe216c4107fc157ee77e343f1c9c5ab1b41a4717812a4c0f"}
 
 name: "Test Improver"
 "on":
@@ -68,6 +68,11 @@ name: "Test Improver"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -451,8 +456,6 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    concurrency:
-      group: "gh-aw-copilot-${{ github.workflow }}"
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -1554,7 +1557,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-test-improver.lock.yml b/.github/workflows/gh-aw-test-improver.lock.yml
index c8c77089..b45f637a 100644
--- a/.github/workflows/gh-aw-test-improver.lock.yml
+++ b/.github/workflows/gh-aw-test-improver.lock.yml
@@ -36,7 +36,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"6ef72d1d56c561e01f84ccfcc3cd5910ff72093b3c9771e73f1c86bb9415f3aa"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"481aa71422028cd2fe216c4107fc157ee77e343f1c9c5ab1b41a4717812a4c0f"}
 
 name: "Test Improver"
 "on":
@@ -63,6 +63,11 @@ name: "Test Improver"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -446,8 +451,6 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    concurrency:
-      group: "gh-aw-copilot-${{ github.workflow }}"
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -1549,7 +1552,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-test-improver.md b/.github/workflows/gh-aw-test-improver.md
index a83ebb5d..b6b842b1 100644
--- a/.github/workflows/gh-aw-test-improver.md
+++ b/.github/workflows/gh-aw-test-improver.md
@@ -47,6 +47,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true
diff --git a/.github/workflows/gh-aw-text-beautifier.lock.yml b/.github/workflows/gh-aw-text-beautifier.lock.yml
index 4d4135b8..5dd7ccce 100644
--- a/.github/workflows/gh-aw-text-beautifier.lock.yml
+++ b/.github/workflows/gh-aw-text-beautifier.lock.yml
@@ -38,7 +38,7 @@
 #
 # inlined-imports: true
 #
-# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"a84d576ef9fe7b8f6ee3f14265c08db439edbdb171c63a4df7284d82b0a5dc6c"}
+# gh-aw-metadata: {"schema_version":"v1","frontmatter_hash":"ea61bab621731da91adc6ac666586f3ed10250a3cb83ac7cfb88717caf42bc9e"}
 
 name: "Text Beautifier"
 "on":
@@ -65,6 +65,11 @@ name: "Text Beautifier"
         description: Whether to create pull requests as drafts
         required: false
         type: boolean
+      github-token-for-extra-empty-commit:
+        default: ""
+        description: GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs
+        required: false
+        type: string
       messages-footer:
         default: ""
         description: Footer appended to all agent comments and reviews
@@ -448,8 +453,6 @@ jobs:
       contents: read
       issues: read
       pull-requests: read
-    concurrency:
-      group: "gh-aw-copilot-${{ github.workflow }}"
     env:
       DEFAULT_BRANCH: ${{ github.event.repository.default_branch }}
       GH_AW_ASSETS_ALLOWED_EXTS: ""
@@ -1551,7 +1554,7 @@ jobs:
         env:
           GH_AW_AGENT_OUTPUT: ${{ env.GH_AW_AGENT_OUTPUT }}
           GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: "{\"create_pull_request\":{\"base_branch\":\"${{ github.base_ref || github.ref_name }}\",\"draft\":\"${{ inputs.draft-prs }}\",\"max\":1,\"max_patch_size\":1024},\"missing_data\":{},\"missing_tool\":{}}"
-          GH_AW_CI_TRIGGER_TOKEN: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
+          GH_AW_CI_TRIGGER_TOKEN: ${{ inputs.github-token-for-extra-empty-commit }}
         with:
           github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
           script: |
diff --git a/.github/workflows/gh-aw-text-beautifier.md b/.github/workflows/gh-aw-text-beautifier.md
index b0a1e99c..12f332fe 100644
--- a/.github/workflows/gh-aw-text-beautifier.md
+++ b/.github/workflows/gh-aw-text-beautifier.md
@@ -49,6 +49,11 @@ on:
         type: boolean
         required: false
         default: true
+      github-token-for-extra-empty-commit:
+        description: "GitHub token for pushing an extra empty commit to allow workflows to run on bot-created PRs"
+        type: string
+        required: false
+        default: ""
     secrets:
       COPILOT_GITHUB_TOKEN:
         required: true