[Code Quality] Refactor compiler to use grouped shell redirects (fix SC2129)

[github-actions]

Description

The workflow compiler generates shell scripts that use multiple individual redirects instead of grouped redirects, triggering 315 shellcheck SC2129 style warnings across all 148 compiled workflows.

Current Pattern (Problematic)

cat << 'EOF' > "$FILE"
content
EOF
cat file1 >> "$FILE"
cat file2 >> "$FILE"

Issue: Each redirect opens the file separately, reducing performance and readability.

Recommended Pattern

{
  cat << 'EOF'
  content
  EOF
  cat file1
  cat file2
} > "$FILE"

Benefits: Single file operation, better performance, cleaner code.

Files Affected

• pkg/workflow/compiler*.go - Template generation code
• All 148 .lock.yml files (will be auto-regenerated after compiler fix)

Success Criteria

• Compiler generates grouped redirects for multi-line file writes
• All shellcheck SC2129 warnings eliminated (315 → 0)
• Existing workflows recompiled with new pattern
• No regression in workflow functionality
• Unit tests verify new code generation pattern

Impact

• Severity: Low (style issue, not functional bug)
• Scope: 315 instances across 148 workflows (100% affected)
• Benefit: Improved code quality, better performance, cleaner audits

Source

Extracted from:

• Discussion #13119 - Static Analysis Report (Feb 1)
• Discussion #11769 - Static Analysis Report (Jan 25)

Implementation Hints

Look for code that generates shell script output in the compiler. Search for patterns like:

// Find code that writes multiple cat/echo commands with >> redirects
// Replace with grouped command pattern

Priority: Medium - Systematic issue affecting all workflows, but low severity

AI generated by Discussion Task Miner - Code Quality Improvement Agent

• expires on Feb 15, 2026, 5:09 PM UTC

[github-actions]

🍪 Issue Monster has assigned this to Copilot!

I've identified this issue as a good candidate for automated resolution and assigned it to the Copilot agent.

The Copilot agent will analyze the issue and create a pull request with the fix.

Om nom nom! 🍪

AI generated by Issue Monster