Remove XPIA prompt injection step and configuration

[Copilot]

Remove XPIA Prompt Insertion Step and Prompt File

This PR removes the XPIA (Cross-Prompt Injection Attack) security warning functionality from gh-aw workflows.

Summary of Changes

Removed Files:

• actions/setup/md/xpia_prompt.md - XPIA security warning prompt file
• pkg/workflow/xpia_test.go - XPIA-specific test file

Modified Files:

• pkg/workflow/prompts.go - Removed generateXPIAPromptStep() function
• pkg/workflow/compiler_yaml.go - Removed call to generate XPIA step
• pkg/workflow/sh.go - Removed xpiaPromptFile constant
• pkg/workflow/compiler_types.go - Removed SafetyPrompt field from WorkflowData
• pkg/workflow/tools_types.go - Removed SafetyPrompt field from ToolsConfig
• pkg/workflow/frontmatter_extraction_metadata.go - Removed extractSafetyPromptSetting()
• pkg/workflow/compiler_orchestrator.go - Removed safety-prompt extraction and initialization
• pkg/workflow/codex_engine.go - Removed SafetyPrompt field initialization
• pkg/workflow/tools_parser.go - Removed parseSafetyPromptTool() and references
• pkg/parser/schemas/main_workflow_schema.json - Removed safety-prompt schema definition
• pkg/parser/schemas/included_file_schema.json - Removed safety-prompt schema definition
• docs/src/content/docs/reference/frontmatter-full.md - Removed safety-prompt documentation
• specs/layout.md - Removed xpia_prompt.md reference
• All .lock.yml workflow files - Recompiled without XPIA step

Test Updates:

• Removed XPIA-specific tests from temp_folder_test.go, importable_tools_test.go, prompt_step_test.go, and prompt_step_helper_test.go

Recent Updates

• ✅ Merged main branch - Integrated latest changes from main
• ✅ Recompiled workflows - All 123 workflows compiled successfully with updated binary

Validation Results

✅ Build: Successfully compiled binary with embedded schemas
✅ Recompile: All 123 workflow files compiled successfully
✅ Format: All Go, JavaScript, and JSON files properly formatted
✅ Lint: No linting issues detected
✅ Tests: All XPIA-related tests removed; remaining test failures are pre-existing (confirmed on base commit)

Pre-existing Test Failures (Not Related to This PR)

The following tests were already failing on the base commit before these changes:

• TestGenerateSafeOutputsConfig/create-agent-session_config
• TestGenerateFilteredToolsJSON (multiple subtests)
• TestGetSafeOutputsToolsJSON
• Other unrelated tests in pkg/workflow

These failures are unrelated to XPIA removal and existed before this PR.

Original prompt

Remove XPIA prompt insertion step and prompt file.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[pelikhan]

@copilot merge main, recompile

[Copilot]

@copilot merge main, recompile

Done. Merged main branch and recompiled all workflows. All 123 workflows compiled successfully. Commit: 139edd0