Updated smoke copilot

[lpcox]

No description provided.

[Copilot]

Pull request overview

This PR refreshes the Smoke Copilot workflow to use the githubnext/gh-aw stack at v0.38.5 and aligns related tooling, containers, and threat-detection behavior. It also makes a small configuration adjustment to the Smoke Codex workflow’s MCP sandbox.

Changes:

• Regenerated .github/workflows/smoke-copilot.lock.yml for gh-aw v0.38.5, switching actions from github/gh-aw to githubnext/gh-aw, updating Copilot CLI, AWF, and container image versions, and adjusting schedule timing.
• Updated threat-detection setup in the Copilot workflow to pass a richer analysis template into setup_threat_detection.cjs, and extended safe-outputs handler configuration to include a noop handler.
• Tweaked .github/workflows/smoke-codex.md to remove containers from the allowed network list and to reference the MCP Gateway container without a pinned version tag.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/smoke-copilot.lock.yml	Regenerated Copilot smoke test workflow lockfile for gh-aw v0.38.5, updating action references, image/CLI versions, MCP gateway configuration, threat-detection prompt wiring, and safe-outputs handler config.
.github/workflows/smoke-codex.md	Adjusts Codex smoke test frontmatter to narrow allowed network scopes and use an unpinned ghcr.io/github/gh-aw-mcpg MCP sandbox container reference.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.