chore: upgrade gh-aw extension to v0.82.14 pre-release

.github/aw/actions-lock.json

@@ -15,10 +15,10 @@
       "version": "v6.1.0",
       "sha": "55cc8345863c7cc4c66a329aec7e433d2d1c52a9"
     },
-    "actions/checkout@v7.0.0": {
+    "actions/checkout@v7.0.1": {
       "repo": "actions/checkout",
-      "version": "v7.0.0",
-      "sha": "9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0"
+      "version": "v7.0.1",
+      "sha": "3d3c42e5aac5ba805825da76410c181273ba90b1"
     },
     "actions/download-artifact@v8.0.1": {
       "repo": "actions/download-artifact",
@@ -65,15 +65,15 @@
       "version": "v8.3.2",
       "sha": "11f9893b081a58869d3b5fccaea48c9e9e46f990"
     },
-    "github/gh-aw-actions/setup-cli@v0.82.13": {
+    "github/gh-aw-actions/setup-cli@v0.82.14": {
       "repo": "github/gh-aw-actions/setup-cli",
-      "version": "v0.82.13",
-      "sha": "a5d8b7df9d4f9137bedb3d074d0a0b005f1e1996"
+      "version": "v0.82.14",
+      "sha": "b6d1443e05b8716267fa19425b99aa4f12006b4a"
     },
-    "github/gh-aw-actions/setup@v0.82.13": {
+    "github/gh-aw-actions/setup@v0.82.14": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.82.13",
-      "sha": "a5d8b7df9d4f9137bedb3d074d0a0b005f1e1996"
+      "version": "v0.82.14",
+      "sha": "b6d1443e05b8716267fa19425b99aa4f12006b4a"
     }
   },
   "containers": {

.github/workflows/ci-cd-gaps-assessment.md

@@ -10,9 +10,9 @@ permissions:
   pull-requests: read
 max-ai-credits: 500
 max-turns: 4
+model: claude-haiku-4.5
 engine:
   id: copilot
-  model: claude-haiku-4.5
 sandbox:
   agent:
     id: awf

.github/workflows/contribution-check.md

@@ -15,9 +15,9 @@ max-turns: 4
 concurrency:
   group: "contribution-check-${{ github.event.pull_request.number || github.ref }}"
   cancel-in-progress: true
+model: gpt-5.4-mini
 engine:
   id: copilot
-  model: gpt-5.4-mini
 tools:
   edit:
   github: false

.github/workflows/copilot-token-usage-analyzer.md

@@ -29,9 +29,9 @@ safe-outputs:
     title-prefix: "\U0001F4CA Copilot Token Usage Report"
     labels: [token-usage-report]
     close-older-issues: true
+model: gpt-5.4-mini
 engine:
   id: copilot
-  model: gpt-5.4-mini
 max-ai-credits: 2500
 timeout-minutes: 15
 steps:

.github/workflows/doc-maintainer.md

@@ -26,7 +26,7 @@ jobs:
       skip_agent: ${{ steps.check.outputs.skip_agent }}
     steps:
       - name: Checkout
-        uses: actions/checkout@v7.0.0
+        uses: actions/checkout@v7.0.1
         with:
           fetch-depth: 0
       - name: Check for relevant changes
@@ -52,9 +52,9 @@ jobs:
             echo "skip_agent=$SKIP_AGENT"
           } >> "$GITHUB_OUTPUT"
 max-turns: 30
+model: claude-haiku-4.5
 engine:
   id: copilot
-  model: claude-haiku-4.5
 tools:
   edit:
   bash: false

.github/workflows/duplicate-code-detector.md

@@ -25,10 +25,9 @@ tools:
     toolsets: [issues]
   bash: true
 
+model: gpt-5.4-mini
 engine:
   id: copilot
-  model: gpt-5.4-mini
-
 safe-outputs:
   threat-detection:
     enabled: false

.github/workflows/export-audit.md

@@ -15,9 +15,9 @@ permissions:
   issues: read
 
 max-turns: 6
+model: claude-sonnet-4.5
 engine:
   id: copilot
-  model: claude-sonnet-4.5
 sandbox:
   agent:
     id: awf

.github/workflows/network-isolation-test.md

@@ -4,9 +4,9 @@ on:
   workflow_dispatch:
 permissions:
   contents: read
+model: claude-haiku-4-5
 engine:
   id: copilot
-  model: claude-haiku-4-5
 network:
   allowed:
     - defaults
@@ -58,4 +58,4 @@ curl -sS -o /dev/null -w "denied=%{http_code}\n" https://example.com && \
 
 Summarize whether network isolation is enforcing the egress allowlist as
 expected: the allowed domain should return an HTTP status code, and the
-non-allowed domain should be blocked.
+non-allowed domain should be blocked.