chore: sync workflow templates

.github/workflows/agents-81-gate-followups.yml

@@ -434,7 +434,7 @@ jobs:
           echo "$metrics_json" >> keepalive-metrics.ndjson
 
       - name: Upload keepalive metrics artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v6
         with:
           name: keepalive-metrics
           path: keepalive-metrics.ndjson
@@ -630,6 +630,7 @@ jobs:
         with:
           sparse-checkout: |
             .github/scripts/prompt_injection_guard.js
+            .github/scripts/github-rate-limited-wrapper.js
             .github/scripts/github-api-with-retry.js
             .github/scripts/token_load_balancer.js
             .github/scripts/agent_registry.js
@@ -1269,7 +1270,7 @@ jobs:
           PY
 
       - name: Upload metrics artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v6
         with:
           name: agents-autofix-metrics
           path: autofix-metrics.ndjson

.github/workflows/agents-auto-pilot.yml

@@ -3154,7 +3154,7 @@ jobs:
       # ── Upload auto-pilot metrics for weekly aggregation ───────────
       - name: Upload auto-pilot metrics
         if: always()
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v6
         continue-on-error: true
         with:
           name: autopilot-metrics-${{ github.run_id }}-${{ github.run_attempt }}

.github/workflows/agents-autofix-loop.yml

@@ -930,7 +930,7 @@ jobs:
           PY
 
       - name: Upload metrics artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v6
         with:
           name: agents-autofix-metrics
           path: autofix-metrics.ndjson

.github/workflows/agents-keepalive-loop.yml

@@ -383,7 +383,7 @@ jobs:
           steps.evaluate.outputs.action == 'run' ||
           steps.evaluate.outputs.action == 'fix' ||
           steps.evaluate.outputs.action == 'conflict'
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v6
         with:
           name: keepalive-task-appendix-${{ steps.evaluate.outputs.pr_number }}
           path: /tmp/keepalive-artifacts/task-appendix.txt
@@ -952,7 +952,7 @@ jobs:
           echo "$metrics_json" >> keepalive-metrics.ndjson
 
       - name: Upload keepalive metrics artifact
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v6
         with:
           name: keepalive-metrics
           path: keepalive-metrics.ndjson

.github/workflows/agents-weekly-metrics.yml

@@ -160,7 +160,7 @@ jobs:
           python scripts/aggregate_agent_metrics.py
 
       - name: Upload weekly summary
-        uses: actions/upload-artifact@v7
+        uses: actions/upload-artifact@v6
         with:
           name: agent-weekly-metrics
           path: agent-weekly-metrics.md

.github/workflows/autofix.yml

@@ -2,20 +2,20 @@
 # Auto-fixes lint and format issues on PRs
 #
 # Triggers:
-# - Gate workflow completes with failure (lint/format issues detected)
+# - Gate/CI/Python CI workflow completes with failure (lint/format issues detected)
 # - Lint job fails early (workflow_job completed)
 # - PR labeled with 'autofix' or 'autofix:clean' (manual trigger)
 #
+# Note: push trigger removed — it caused "This isn't working right now" errors
+# because GitHub Actions can't resolve the reusable workflow reference on push events
+#
 # Copy this file to: .github/workflows/autofix.yml
 #
 # Required secrets:
 # - SERVICE_BOT_PAT: PAT for pushing autofix commits (optional, uses GITHUB_TOKEN if not set)
 name: Autofix
 
 on:
-  push:
-    branches:
-      - '**'
   workflow_run:
     workflows: ["Gate", "CI", "Python CI"]
     types: [completed]
@@ -51,16 +51,8 @@ concurrency:
   cancel-in-progress: true
 
 jobs:
-  push-noop:
-    name: Push noop
-    if: ${{ github.event_name == 'push' }}
-    runs-on: ubuntu-latest
-    steps:
-      - run: echo "Autofix workflow ignores push events; nothing to do."
-
   # Resolve PR context
   resolve:
-    if: ${{ github.event_name != 'push' }}
     name: Resolve Context
     runs-on: ubuntu-latest
     outputs:

.github/workflows/maint-coverage-guard.yml

@@ -186,7 +186,7 @@ jobs:
 
       - name: Download coverage trend artifact
         if: ${{ steps.discover.outputs.run_id }}
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v7
         continue-on-error: true
         with:
           name: gate-coverage-trend
@@ -196,7 +196,7 @@ jobs:
 
       - name: Download coverage payload artifact
         if: ${{ steps.discover.outputs.run_id }}
-        uses: actions/download-artifact@v8
+        uses: actions/download-artifact@v7
         continue-on-error: true
         with:
           name: gate-coverage