diff --git a/.github/aw/actions-lock.json b/.github/aw/actions-lock.json
index 9326fe7c8f..35fb500e46 100644
--- a/.github/aw/actions-lock.json
+++ b/.github/aw/actions-lock.json
@@ -1,14 +1,14 @@
 {
   "entries": {
-    "actions/ai-inference@v2": {
+    "actions/ai-inference@v2.0.5": {
       "repo": "actions/ai-inference",
-      "version": "v2",
-      "sha": "334892bb203895caaed82ec52d23c1ed9385151e"
+      "version": "v2.0.5",
+      "sha": "a6101c89c6feaecc585efdd8d461f18bb7896f20"
     },
-    "actions/attest-build-provenance@v2": {
+    "actions/attest-build-provenance@v2.4.0": {
       "repo": "actions/attest-build-provenance",
-      "version": "v2",
-      "sha": "96b4a1ef7235a096b17240c259729fdd70c83d45"
+      "version": "v2.4.0",
+      "sha": "e8998f949152b193b063cb0ec769d69d929409be"
     },
     "actions/cache/restore@v4.3.0": {
       "repo": "actions/cache/restore",
@@ -25,9 +25,9 @@
       "version": "v4.3.0",
       "sha": "0057852bfaa89a56745cba8c7296529d2fc39830"
     },
-    "actions/checkout@v4": {
+    "actions/checkout@v4.3.1": {
       "repo": "actions/checkout",
-      "version": "v4",
+      "version": "v4.3.1",
       "sha": "34e114876b0b11c390a56381ad16ebd13914f8d5"
     },
     "actions/checkout@v5.0.1": {
@@ -40,24 +40,19 @@
       "version": "v2.2.1",
       "sha": "29824e69f54612133e76f7eaac726eef6c875baf"
     },
-    "actions/download-artifact@v6.0.0": {
+    "actions/download-artifact@v6": {
       "repo": "actions/download-artifact",
-      "version": "v6.0.0",
+      "version": "v6",
       "sha": "018cc2cf5baa6db3ef3c5f8a56943fffe632ef53"
     },
-    "actions/github-script@v7": {
+    "actions/github-script@v7.1.0": {
       "repo": "actions/github-script",
-      "version": "v7",
+      "version": "v7.1.0",
       "sha": "f28e40c7f34bde8b3046d885e986cb6290c5673b"
     },
-    "actions/github-script@v7.0.1": {
-      "repo": "actions/github-script",
-      "version": "v7.0.1",
-      "sha": "60a0d83039c74a4aee543508d2ffcb1c3799cdea"
-    },
-    "actions/github-script@v8.0.0": {
+    "actions/github-script@v8": {
       "repo": "actions/github-script",
-      "version": "v8.0.0",
+      "version": "v8",
       "sha": "ed597411d8f924073f98dfc5c65a23a2325f34cd"
     },
     "actions/setup-dotnet@v4": {
@@ -65,31 +60,21 @@
       "version": "v4.3.1",
       "sha": "67a3573c9a986a3f9c594539f4ab511d57bb3ce9"
     },
-    "actions/setup-go@v6": {
+    "actions/setup-go@v6.2.0": {
       "repo": "actions/setup-go",
-      "version": "v6",
+      "version": "v6.2.0",
       "sha": "7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5"
     },
-    "actions/setup-go@v6.1.0": {
-      "repo": "actions/setup-go",
-      "version": "v6.1.0",
-      "sha": "4dc6199c7b1a012772edbd06daecab0f50c9053c"
-    },
     "actions/setup-java@v4": {
       "repo": "actions/setup-java",
       "version": "v4.8.0",
       "sha": "c1e323688fd81a25caa38c78aa6df2d33d3e20d9"
     },
-    "actions/setup-node@v6": {
+    "actions/setup-node@v6.2.0": {
       "repo": "actions/setup-node",
-      "version": "v6",
+      "version": "v6.2.0",
       "sha": "6044e13b5dc448c55e2357c09f80417699197238"
     },
-    "actions/setup-node@v6.1.0": {
-      "repo": "actions/setup-node",
-      "version": "v6.1.0",
-      "sha": "395ad3262231945c25e8478fd5baf05154b1d79f"
-    },
     "actions/setup-python@v5.6.0": {
       "repo": "actions/setup-python",
       "version": "v5.6.0",
@@ -100,30 +85,20 @@
       "version": "v4.6.2",
       "sha": "ea165f8d65b6e75b540449e92b4886f43607fa02"
     },
-    "actions/upload-artifact@v5.0.0": {
+    "actions/upload-artifact@v5": {
       "repo": "actions/upload-artifact",
-      "version": "v5.0.0",
+      "version": "v5",
       "sha": "330a01c490aca151604b8cf639adc76d48f6c5d4"
     },
-    "actions/upload-artifact@v6.0.0": {
+    "actions/upload-artifact@v6": {
       "repo": "actions/upload-artifact",
-      "version": "v6.0.0",
+      "version": "v6",
       "sha": "b7c566a772e6b6bfb58ed0dc250532a479d7789f"
     },
-    "anchore/sbom-action@v0": {
-      "repo": "anchore/sbom-action",
-      "version": "v0",
-      "sha": "0b82b0b1a22399a1c542d4d656f70cd903571b5c"
-    },
-    "anchore/sbom-action@v0.20.10": {
+    "anchore/sbom-action@v0.22.0": {
       "repo": "anchore/sbom-action",
-      "version": "v0.20.10",
-      "sha": "fbfd9c6c189226748411491745178e0c2017392d"
-    },
-    "anchore/sbom-action@v0.20.11": {
-      "repo": "anchore/sbom-action",
-      "version": "v0.20.11",
-      "sha": "43a17d6e7add2b5535efe4dcae9952337c479a93"
+      "version": "v0.22.0",
+      "sha": "62ad5284b8ced813296287a0b63906cb364b73ee"
     },
     "astral-sh/setup-uv@v5.4.2": {
       "repo": "astral-sh/setup-uv",
@@ -140,24 +115,24 @@
       "version": "v2.0.3",
       "sha": "e95548e56dfa95d4e1a28d6f422fafe75c4c26fb"
     },
-    "docker/build-push-action@v6": {
+    "docker/build-push-action@v6.18.0": {
       "repo": "docker/build-push-action",
-      "version": "v6",
+      "version": "v6.18.0",
       "sha": "263435318d21b8e681c14492fe198d362a7d2c83"
     },
-    "docker/login-action@v3": {
+    "docker/login-action@v3.6.0": {
       "repo": "docker/login-action",
-      "version": "v3",
+      "version": "v3.6.0",
       "sha": "5e57cd118135c172c3672efd75eb46360885c0ef"
     },
-    "docker/metadata-action@v5": {
+    "docker/metadata-action@v5.10.0": {
       "repo": "docker/metadata-action",
-      "version": "v5",
+      "version": "v5.10.0",
       "sha": "c299e40c65443455700f0fdfc63efafe5b349051"
     },
-    "docker/setup-buildx-action@v3": {
+    "docker/setup-buildx-action@v3.12.0": {
       "repo": "docker/setup-buildx-action",
-      "version": "v3",
+      "version": "v3.12.0",
       "sha": "8d2750c68a42422c14e847fe6c8ac0403b4cbd6f"
     },
     "erlef/setup-beam@v1": {
@@ -165,45 +140,35 @@
       "version": "v1.20.4",
       "sha": "dff508cca8ce57162e7aa6c4769a4f97c2fed638"
     },
-    "github/codeql-action/upload-sarif@v3": {
+    "github/codeql-action/upload-sarif@v3.31.10": {
       "repo": "github/codeql-action/upload-sarif",
-      "version": "v3.31.9",
-      "sha": "70c165ac82ca0e33a10e9741508dd0ccb4dcf080"
-    },
-    "github/stale-repos@v3": {
-      "repo": "github/stale-repos",
-      "version": "v3",
-      "sha": "3477b6488008d9411aaf22a0924ec7c1f6a69980"
+      "version": "v3.31.10",
+      "sha": "3c8d1abf587ffce02620e8b44b3f91275ccbbd7d"
     },
     "github/stale-repos@v3.0.2": {
       "repo": "github/stale-repos",
       "version": "v3.0.2",
       "sha": "a21e55567b83cf3c3f3f9085d3038dc6cee02598"
     },
-    "haskell-actions/setup@v2": {
+    "haskell-actions/setup@v2.10.3": {
       "repo": "haskell-actions/setup",
-      "version": "v2.9.1",
-      "sha": "55073cbd0e96181a9abd6ff4e7d289867dffc98d"
+      "version": "v2.10.3",
+      "sha": "9cd1b7bf3f36d5a3c3b17abc3545bfb5481912ea"
     },
-    "oven-sh/setup-bun@v2": {
+    "oven-sh/setup-bun@v2.1.2": {
       "repo": "oven-sh/setup-bun",
-      "version": "v2.0.2",
-      "sha": "735343b667d3e6f658f44d0eca948eb6282f2b76"
+      "version": "v2.1.2",
+      "sha": "3d267786b128fe76c2f16a390aa2448b815359f3"
     },
-    "ruby/setup-ruby@v1": {
+    "ruby/setup-ruby@v1.286.0": {
       "repo": "ruby/setup-ruby",
-      "version": "v1.275.0",
-      "sha": "d354de180d0c9e813cfddfcbdc079945d4be589b"
-    },
-    "super-linter/super-linter@v8.2.1": {
-      "repo": "super-linter/super-linter",
-      "version": "v8.2.1",
-      "sha": "2bdd90ed3262e023ac84bf8fe35dc480721fc1f2"
+      "version": "v1.286.0",
+      "sha": "90be1154f987f4dc0fe0dd0feedac9e473aa4ba8"
     },
-    "super-linter/super-linter@v8.3.1": {
+    "super-linter/super-linter@v8.3.2": {
       "repo": "super-linter/super-linter",
-      "version": "v8.3.1",
-      "sha": "47984f49b4e87383eed97890fe2dca6063bbd9c3"
+      "version": "v8.3.2",
+      "sha": "d5b0a2ab116623730dd094f15ddc1b6b25bf7b99"
     }
   }
 }
diff --git a/.github/workflows/agent-performance-analyzer.lock.yml b/.github/workflows/agent-performance-analyzer.lock.yml
index a8b5e21eef..ba01d1e7ac 100644
--- a/.github/workflows/agent-performance-analyzer.lock.yml
+++ b/.github/workflows/agent-performance-analyzer.lock.yml
@@ -24,7 +24,7 @@
 name: "Agent Performance Analyzer - Meta-Orchestrator"
 "on":
   schedule:
-  - cron: "48 4 * * *"
+  - cron: "54 5 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/agent-persona-explorer.lock.yml b/.github/workflows/agent-persona-explorer.lock.yml
index afbe629ec3..8604545cc4 100644
--- a/.github/workflows/agent-persona-explorer.lock.yml
+++ b/.github/workflows/agent-persona-explorer.lock.yml
@@ -24,7 +24,7 @@
 name: "Agent Persona Explorer"
 "on":
   schedule:
-  - cron: "9 5 * * *"
+  - cron: "7 0 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/artifacts-summary.lock.yml b/.github/workflows/artifacts-summary.lock.yml
index 80110018ab..27842e5cb2 100644
--- a/.github/workflows/artifacts-summary.lock.yml
+++ b/.github/workflows/artifacts-summary.lock.yml
@@ -29,7 +29,7 @@
 name: "Artifacts Summary"
 "on":
   schedule:
-  - cron: "39 6 * * 0"
+  - cron: "5 5 * * 0"
     # Friendly format: weekly on sunday around 06:00 (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/audit-workflows.lock.yml b/.github/workflows/audit-workflows.lock.yml
index 5721cd65a1..f3b32506f6 100644
--- a/.github/workflows/audit-workflows.lock.yml
+++ b/.github/workflows/audit-workflows.lock.yml
@@ -31,7 +31,7 @@
 name: "Agentic Workflow Audit Agent"
 "on":
   schedule:
-  - cron: "37 3 * * *"
+  - cron: "27 0 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/auto-triage-issues.lock.yml b/.github/workflows/auto-triage-issues.lock.yml
index b9f07273b1..98e800eedf 100644
--- a/.github/workflows/auto-triage-issues.lock.yml
+++ b/.github/workflows/auto-triage-issues.lock.yml
@@ -28,7 +28,7 @@ name: "Auto-Triage Issues"
     - opened
     - edited
   schedule:
-  - cron: "2 */6 * * *"
+  - cron: "28 */6 * * *"
     # Friendly format: every 6h (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/blog-auditor.lock.yml b/.github/workflows/blog-auditor.lock.yml
index bc879d3fa1..5717db8700 100644
--- a/.github/workflows/blog-auditor.lock.yml
+++ b/.github/workflows/blog-auditor.lock.yml
@@ -28,7 +28,7 @@
 name: "Blog Auditor"
 "on":
   schedule:
-  - cron: "4 11 * * 3"
+  - cron: "54 11 * * 3"
     # Friendly format: weekly on wednesday around 12:00 (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/cli-version-checker.lock.yml b/.github/workflows/cli-version-checker.lock.yml
index bc9f56d28c..a998bc49f4 100644
--- a/.github/workflows/cli-version-checker.lock.yml
+++ b/.github/workflows/cli-version-checker.lock.yml
@@ -28,7 +28,7 @@
 name: "CLI Version Checker"
 "on":
   schedule:
-  - cron: "2 19 * * *"
+  - cron: "12 23 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/code-simplifier.lock.yml b/.github/workflows/code-simplifier.lock.yml
index 79d71cb510..26d6502b6d 100644
--- a/.github/workflows/code-simplifier.lock.yml
+++ b/.github/workflows/code-simplifier.lock.yml
@@ -28,7 +28,7 @@
 name: "Code Simplifier"
 "on":
   schedule:
-  - cron: "9 14 * * *"
+  - cron: "3 5 * * *"
     # Friendly format: daily (scattered)
   # skip-if-match: is:pr is:open in:title "[code-simplifier]" # Skip-if-match processed as search check in pre-activation job
   workflow_dispatch:
diff --git a/.github/workflows/copilot-agent-analysis.lock.yml b/.github/workflows/copilot-agent-analysis.lock.yml
index 8895e0d828..7c7b0ec3d5 100644
--- a/.github/workflows/copilot-agent-analysis.lock.yml
+++ b/.github/workflows/copilot-agent-analysis.lock.yml
@@ -30,7 +30,7 @@
 name: "Copilot Agent PR Analysis"
 "on":
   schedule:
-  - cron: "2 5 * * *"
+  - cron: "40 17 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/copilot-cli-deep-research.lock.yml b/.github/workflows/copilot-cli-deep-research.lock.yml
index 2b02aee569..13fb25a4b8 100644
--- a/.github/workflows/copilot-cli-deep-research.lock.yml
+++ b/.github/workflows/copilot-cli-deep-research.lock.yml
@@ -24,7 +24,7 @@
 name: "Copilot CLI Deep Research Agent"
 "on":
   schedule:
-  - cron: "55 15 * * *"
+  - cron: "29 12 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/copilot-pr-prompt-analysis.lock.yml b/.github/workflows/copilot-pr-prompt-analysis.lock.yml
index b27dc9de1a..d94516087f 100644
--- a/.github/workflows/copilot-pr-prompt-analysis.lock.yml
+++ b/.github/workflows/copilot-pr-prompt-analysis.lock.yml
@@ -30,7 +30,7 @@
 name: "Copilot PR Prompt Pattern Analysis"
 "on":
   schedule:
-  - cron: "56 11 * * *"
+  - cron: "58 5 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/copilot-session-insights.lock.yml b/.github/workflows/copilot-session-insights.lock.yml
index aeaf268fbd..1d67143b8b 100644
--- a/.github/workflows/copilot-session-insights.lock.yml
+++ b/.github/workflows/copilot-session-insights.lock.yml
@@ -33,7 +33,7 @@
 name: "Copilot Session Insights"
 "on":
   schedule:
-  - cron: "54 5 * * *"
+  - cron: "8 10 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-assign-issue-to-user.lock.yml b/.github/workflows/daily-assign-issue-to-user.lock.yml
index 92a498b82f..385c42667c 100644
--- a/.github/workflows/daily-assign-issue-to-user.lock.yml
+++ b/.github/workflows/daily-assign-issue-to-user.lock.yml
@@ -23,7 +23,7 @@
 name: "Auto-Assign Issue"
 "on":
   schedule:
-  - cron: "50 5 * * *"
+  - cron: "36 19 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-cli-performance.lock.yml b/.github/workflows/daily-cli-performance.lock.yml
index dc818d673c..fe3317b969 100644
--- a/.github/workflows/daily-cli-performance.lock.yml
+++ b/.github/workflows/daily-cli-performance.lock.yml
@@ -28,7 +28,7 @@
 name: "Daily CLI Performance Agent"
 "on":
   schedule:
-  - cron: "2 22 * * *"
+  - cron: "0 10 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-code-metrics.lock.yml b/.github/workflows/daily-code-metrics.lock.yml
index 0cd920b40e..6500ff835e 100644
--- a/.github/workflows/daily-code-metrics.lock.yml
+++ b/.github/workflows/daily-code-metrics.lock.yml
@@ -30,7 +30,7 @@
 name: "Daily Code Metrics and Trend Tracking Agent"
 "on":
   schedule:
-  - cron: "2 17 * * *"
+  - cron: "24 0 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-compiler-quality.lock.yml b/.github/workflows/daily-compiler-quality.lock.yml
index f4cdc98d18..95667526fe 100644
--- a/.github/workflows/daily-compiler-quality.lock.yml
+++ b/.github/workflows/daily-compiler-quality.lock.yml
@@ -28,7 +28,7 @@
 name: "Daily Compiler Quality Check"
 "on":
   schedule:
-  - cron: "10 4 * * *"
+  - cron: "24 1 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-doc-updater.lock.yml b/.github/workflows/daily-doc-updater.lock.yml
index cbcbd80844..0e875635c3 100644
--- a/.github/workflows/daily-doc-updater.lock.yml
+++ b/.github/workflows/daily-doc-updater.lock.yml
@@ -24,7 +24,7 @@
 name: "Daily Documentation Updater"
 "on":
   schedule:
-  - cron: "55 17 * * *"
+  - cron: "1 6 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-firewall-report.lock.yml b/.github/workflows/daily-firewall-report.lock.yml
index 68854704df..6ada555cf9 100644
--- a/.github/workflows/daily-firewall-report.lock.yml
+++ b/.github/workflows/daily-firewall-report.lock.yml
@@ -30,7 +30,7 @@
 name: "Daily Firewall Logs Collector and Reporter"
 "on":
   schedule:
-  - cron: "26 12 * * *"
+  - cron: "12 6 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-issues-report.lock.yml b/.github/workflows/daily-issues-report.lock.yml
index 20c84555c3..c69bb7e394 100644
--- a/.github/workflows/daily-issues-report.lock.yml
+++ b/.github/workflows/daily-issues-report.lock.yml
@@ -32,7 +32,7 @@
 name: "Daily Issues Report Generator"
 "on":
   schedule:
-  - cron: "10 16 * * *"
+  - cron: "8 19 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-malicious-code-scan.lock.yml b/.github/workflows/daily-malicious-code-scan.lock.yml
index 695b595dbe..5216ff69bd 100644
--- a/.github/workflows/daily-malicious-code-scan.lock.yml
+++ b/.github/workflows/daily-malicious-code-scan.lock.yml
@@ -28,7 +28,7 @@
 name: "Daily Malicious Code Scan Agent"
 "on":
   schedule:
-  - cron: "47 2 * * *"
+  - cron: "37 21 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-multi-device-docs-tester.lock.yml b/.github/workflows/daily-multi-device-docs-tester.lock.yml
index 0a5f3e7eef..39ffed1efe 100644
--- a/.github/workflows/daily-multi-device-docs-tester.lock.yml
+++ b/.github/workflows/daily-multi-device-docs-tester.lock.yml
@@ -29,7 +29,7 @@
 name: "Multi-Device Docs Tester"
 "on":
   schedule:
-  - cron: "19 9 * * *"
+  - cron: "9 10 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
     inputs:
diff --git a/.github/workflows/daily-observability-report.lock.yml b/.github/workflows/daily-observability-report.lock.yml
index c96eff3c93..6ee97a3869 100644
--- a/.github/workflows/daily-observability-report.lock.yml
+++ b/.github/workflows/daily-observability-report.lock.yml
@@ -28,7 +28,7 @@
 name: "Daily Observability Report for AWF Firewall and MCP Gateway"
 "on":
   schedule:
-  - cron: "19 16 * * *"
+  - cron: "1 5 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-performance-summary.lock.yml b/.github/workflows/daily-performance-summary.lock.yml
index 17fd4ff722..685fb08db8 100644
--- a/.github/workflows/daily-performance-summary.lock.yml
+++ b/.github/workflows/daily-performance-summary.lock.yml
@@ -30,7 +30,7 @@
 name: "Daily Project Performance Summary Generator (Using Safe Inputs)"
 "on":
   schedule:
-  - cron: "24 2 * * *"
+  - cron: "6 23 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-regulatory.lock.yml b/.github/workflows/daily-regulatory.lock.yml
index bd3bb806a7..48ce064e46 100644
--- a/.github/workflows/daily-regulatory.lock.yml
+++ b/.github/workflows/daily-regulatory.lock.yml
@@ -29,7 +29,7 @@
 name: "Daily Regulatory Report Generator"
 "on":
   schedule:
-  - cron: "51 18 * * *"
+  - cron: "13 19 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-safe-output-optimizer.lock.yml b/.github/workflows/daily-safe-output-optimizer.lock.yml
index 30a7731b39..86f414d241 100644
--- a/.github/workflows/daily-safe-output-optimizer.lock.yml
+++ b/.github/workflows/daily-safe-output-optimizer.lock.yml
@@ -30,7 +30,7 @@
 name: "Daily Safe Output Tool Optimizer"
 "on":
   schedule:
-  - cron: "0 4 * * *"
+  - cron: "30 19 * * *"
     # Friendly format: daily (scattered)
   # skip-if-match: is:issue is:open in:title "[safeoutputs]" # Skip-if-match processed as search check in pre-activation job
   workflow_dispatch:
diff --git a/.github/workflows/daily-secrets-analysis.lock.yml b/.github/workflows/daily-secrets-analysis.lock.yml
index 4f0c8cda74..87033785e6 100644
--- a/.github/workflows/daily-secrets-analysis.lock.yml
+++ b/.github/workflows/daily-secrets-analysis.lock.yml
@@ -28,7 +28,7 @@
 name: "Daily Secrets Analysis Agent"
 "on":
   schedule:
-  - cron: "31 9 * * *"
+  - cron: "53 14 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-team-evolution-insights.lock.yml b/.github/workflows/daily-team-evolution-insights.lock.yml
index e4e739144c..5ea81b5724 100644
--- a/.github/workflows/daily-team-evolution-insights.lock.yml
+++ b/.github/workflows/daily-team-evolution-insights.lock.yml
@@ -28,7 +28,7 @@
 name: "Daily Team Evolution Insights"
 "on":
   schedule:
-  - cron: "54 10 * * *"
+  - cron: "12 17 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/daily-testify-uber-super-expert.lock.yml b/.github/workflows/daily-testify-uber-super-expert.lock.yml
index f402bcd809..59b2f968ba 100644
--- a/.github/workflows/daily-testify-uber-super-expert.lock.yml
+++ b/.github/workflows/daily-testify-uber-super-expert.lock.yml
@@ -29,7 +29,7 @@
 name: "Daily Testify Uber Super Expert"
 "on":
   schedule:
-  - cron: "59 10 * * *"
+  - cron: "49 22 * * *"
     # Friendly format: daily (scattered)
   # skip-if-match: is:issue is:open in:title "[testify-expert]" # Skip-if-match processed as search check in pre-activation job
   workflow_dispatch:
diff --git a/.github/workflows/daily-workflow-updater.lock.yml b/.github/workflows/daily-workflow-updater.lock.yml
index 7a0e5a418e..a41b8393c6 100644
--- a/.github/workflows/daily-workflow-updater.lock.yml
+++ b/.github/workflows/daily-workflow-updater.lock.yml
@@ -24,7 +24,7 @@
 name: "Daily Workflow Updater"
 "on":
   schedule:
-  - cron: "18 5 * * *"
+  - cron: "12 14 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/delight.lock.yml b/.github/workflows/delight.lock.yml
index 66045cbb7c..e715d29350 100644
--- a/.github/workflows/delight.lock.yml
+++ b/.github/workflows/delight.lock.yml
@@ -29,7 +29,7 @@
 name: "Delight"
 "on":
   schedule:
-  - cron: "22 8 * * *"
+  - cron: "28 18 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/developer-docs-consolidator.lock.yml b/.github/workflows/developer-docs-consolidator.lock.yml
index 7faa5c1d1a..e0a07194f0 100644
--- a/.github/workflows/developer-docs-consolidator.lock.yml
+++ b/.github/workflows/developer-docs-consolidator.lock.yml
@@ -28,7 +28,7 @@
 name: "Developer Documentation Consolidator"
 "on":
   schedule:
-  - cron: "3 10 * * *"
+  - cron: "25 8 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/discussion-task-miner.lock.yml b/.github/workflows/discussion-task-miner.lock.yml
index 5abb93b697..3be6f98707 100644
--- a/.github/workflows/discussion-task-miner.lock.yml
+++ b/.github/workflows/discussion-task-miner.lock.yml
@@ -29,7 +29,7 @@
 name: "Discussion Task Miner - Code Quality Improvement Agent"
 "on":
   schedule:
-  - cron: "57 13 * * *"
+  - cron: "59 15 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/docs-noob-tester.lock.yml b/.github/workflows/docs-noob-tester.lock.yml
index f23b8aca6a..aae73aca11 100644
--- a/.github/workflows/docs-noob-tester.lock.yml
+++ b/.github/workflows/docs-noob-tester.lock.yml
@@ -28,7 +28,7 @@
 name: "Documentation Noob Tester"
 "on":
   schedule:
-  - cron: "29 7 * * *"
+  - cron: "19 18 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/duplicate-code-detector.lock.yml b/.github/workflows/duplicate-code-detector.lock.yml
index 2af10af51b..bf49e8b874 100644
--- a/.github/workflows/duplicate-code-detector.lock.yml
+++ b/.github/workflows/duplicate-code-detector.lock.yml
@@ -24,7 +24,7 @@
 name: "Duplicate Code Detector"
 "on":
   schedule:
-  - cron: "19 19 * * *"
+  - cron: "41 10 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/example-workflow-analyzer.lock.yml b/.github/workflows/example-workflow-analyzer.lock.yml
index b18055a25f..d8ccdf9f43 100644
--- a/.github/workflows/example-workflow-analyzer.lock.yml
+++ b/.github/workflows/example-workflow-analyzer.lock.yml
@@ -28,7 +28,7 @@
 name: "Weekly Workflow Analysis"
 "on":
   schedule:
-  - cron: "38 9 * * 1"
+  - cron: "4 8 * * 1"
     # Friendly format: weekly on monday around 09:00 (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/firewall-escape.lock.yml b/.github/workflows/firewall-escape.lock.yml
index b51edbe7ef..fca193654d 100644
--- a/.github/workflows/firewall-escape.lock.yml
+++ b/.github/workflows/firewall-escape.lock.yml
@@ -29,7 +29,7 @@ name: "The Great Escapi"
     types:
     - labeled
   schedule:
-  - cron: "49 0 * * *"
+  - cron: "31 22 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/github-mcp-tools-report.lock.yml b/.github/workflows/github-mcp-tools-report.lock.yml
index 87f916eea1..8828d22ca3 100644
--- a/.github/workflows/github-mcp-tools-report.lock.yml
+++ b/.github/workflows/github-mcp-tools-report.lock.yml
@@ -28,7 +28,7 @@
 name: "GitHub MCP Remote Server Tools Report Generator"
 "on":
   schedule:
-  - cron: "50 12 * * 0"
+  - cron: "8 12 * * 0"
     # Friendly format: weekly on sunday around 12:00 (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/github-remote-mcp-auth-test.lock.yml b/.github/workflows/github-remote-mcp-auth-test.lock.yml
index 3146eda0d6..1eec4c79b2 100644
--- a/.github/workflows/github-remote-mcp-auth-test.lock.yml
+++ b/.github/workflows/github-remote-mcp-auth-test.lock.yml
@@ -24,7 +24,7 @@
 name: "GitHub Remote MCP Authentication Test"
 "on":
   schedule:
-  - cron: "46 11 * * *"
+  - cron: "12 8 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/go-logger.lock.yml b/.github/workflows/go-logger.lock.yml
index 0410ea375e..b7080de533 100644
--- a/.github/workflows/go-logger.lock.yml
+++ b/.github/workflows/go-logger.lock.yml
@@ -24,7 +24,7 @@
 name: "Go Logger Enhancement"
 "on":
   schedule:
-  - cron: "14 6 * * *"
+  - cron: "52 15 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/instructions-janitor.lock.yml b/.github/workflows/instructions-janitor.lock.yml
index a1cfeb11a4..6c77b4d367 100644
--- a/.github/workflows/instructions-janitor.lock.yml
+++ b/.github/workflows/instructions-janitor.lock.yml
@@ -24,7 +24,7 @@
 name: "Instructions Janitor"
 "on":
   schedule:
-  - cron: "18 20 * * *"
+  - cron: "48 9 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/issue-arborist.lock.yml b/.github/workflows/issue-arborist.lock.yml
index dabd618d3b..242a715329 100644
--- a/.github/workflows/issue-arborist.lock.yml
+++ b/.github/workflows/issue-arborist.lock.yml
@@ -28,7 +28,7 @@
 name: "Issue Arborist"
 "on":
   schedule:
-  - cron: "33 14 * * *"
+  - cron: "7 1 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/issue-monster.lock.yml b/.github/workflows/issue-monster.lock.yml
index 0240e29a7e..cffe8ee29b 100644
--- a/.github/workflows/issue-monster.lock.yml
+++ b/.github/workflows/issue-monster.lock.yml
@@ -24,7 +24,7 @@
 name: "Issue Monster"
 "on":
   schedule:
-  - cron: "49 */1 * * *"
+  - cron: "47 */1 * * *"
     # Friendly format: every 1h (scattered)
   # skip-if-match: # Skip-if-match processed as search check in pre-activation job
     # max: 9
diff --git a/.github/workflows/jsweep.lock.yml b/.github/workflows/jsweep.lock.yml
index 0c5a5ec6a9..6d4383fa0e 100644
--- a/.github/workflows/jsweep.lock.yml
+++ b/.github/workflows/jsweep.lock.yml
@@ -24,7 +24,7 @@
 name: "jsweep - JavaScript Unbloater"
 "on":
   schedule:
-  - cron: "47 14 * * *"
+  - cron: "45 15 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/lockfile-stats.lock.yml b/.github/workflows/lockfile-stats.lock.yml
index 7adaccb602..dae306e2f3 100644
--- a/.github/workflows/lockfile-stats.lock.yml
+++ b/.github/workflows/lockfile-stats.lock.yml
@@ -28,7 +28,7 @@
 name: "Lockfile Statistics Analysis Agent"
 "on":
   schedule:
-  - cron: "48 14 * * *"
+  - cron: "50 7 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/mcp-inspector.lock.yml b/.github/workflows/mcp-inspector.lock.yml
index 33f344732c..4b0b6b620e 100644
--- a/.github/workflows/mcp-inspector.lock.yml
+++ b/.github/workflows/mcp-inspector.lock.yml
@@ -43,7 +43,7 @@
 name: "MCP Inspector Agent"
 "on":
   schedule:
-  - cron: "45 18 * * 1"
+  - cron: "11 17 * * 1"
     # Friendly format: weekly on monday around 18:00 (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/metrics-collector.lock.yml b/.github/workflows/metrics-collector.lock.yml
index 01adc0637f..04dc336ebf 100644
--- a/.github/workflows/metrics-collector.lock.yml
+++ b/.github/workflows/metrics-collector.lock.yml
@@ -24,7 +24,7 @@
 name: "Metrics Collector - Infrastructure Agent"
 "on":
   schedule:
-  - cron: "28 14 * * *"
+  - cron: "30 16 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/org-health-report.lock.yml b/.github/workflows/org-health-report.lock.yml
index a57b8e0b52..6e65fc278a 100644
--- a/.github/workflows/org-health-report.lock.yml
+++ b/.github/workflows/org-health-report.lock.yml
@@ -30,7 +30,7 @@
 name: "Organization Health Report"
 "on":
   schedule:
-  - cron: "33 9 * * 1"
+  - cron: "11 9 * * 1"
     # Friendly format: weekly on monday around 09:00 (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/portfolio-analyst.lock.yml b/.github/workflows/portfolio-analyst.lock.yml
index 451660ece8..81e508ffb5 100644
--- a/.github/workflows/portfolio-analyst.lock.yml
+++ b/.github/workflows/portfolio-analyst.lock.yml
@@ -31,7 +31,7 @@
 name: "Automated Portfolio Analyst"
 "on":
   schedule:
-  - cron: "8 8 * * 1"
+  - cron: "14 8 * * 1"
     # Friendly format: weekly on monday around 09:00 (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/prompt-clustering-analysis.lock.yml b/.github/workflows/prompt-clustering-analysis.lock.yml
index 0cf5e44dda..033fe939b4 100644
--- a/.github/workflows/prompt-clustering-analysis.lock.yml
+++ b/.github/workflows/prompt-clustering-analysis.lock.yml
@@ -32,7 +32,7 @@
 name: "Copilot Agent Prompt Clustering Analysis"
 "on":
   schedule:
-  - cron: "13 6 * * *"
+  - cron: "59 18 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/repo-tree-map.lock.yml b/.github/workflows/repo-tree-map.lock.yml
index 9abe950bea..6b380eb892 100644
--- a/.github/workflows/repo-tree-map.lock.yml
+++ b/.github/workflows/repo-tree-map.lock.yml
@@ -28,7 +28,7 @@
 name: "Repository Tree Map Generator"
 "on":
   schedule:
-  - cron: "17 14 * * 1"
+  - cron: "59 15 * * 1"
     # Friendly format: weekly on monday around 15:00 (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/safe-output-health.lock.yml b/.github/workflows/safe-output-health.lock.yml
index b8c8e92cd9..2c7be85259 100644
--- a/.github/workflows/safe-output-health.lock.yml
+++ b/.github/workflows/safe-output-health.lock.yml
@@ -30,7 +30,7 @@
 name: "Safe Output Health Monitor"
 "on":
   schedule:
-  - cron: "15 23 * * *"
+  - cron: "29 2 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/schema-consistency-checker.lock.yml b/.github/workflows/schema-consistency-checker.lock.yml
index bb95f1b2ac..427ac03f04 100644
--- a/.github/workflows/schema-consistency-checker.lock.yml
+++ b/.github/workflows/schema-consistency-checker.lock.yml
@@ -28,7 +28,7 @@
 name: "Schema Consistency Checker"
 "on":
   schedule:
-  - cron: "41 23 * * *"
+  - cron: "7 16 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/security-fix-pr.lock.yml b/.github/workflows/security-fix-pr.lock.yml
index 2aacdcc5e0..5ae7cffbd1 100644
--- a/.github/workflows/security-fix-pr.lock.yml
+++ b/.github/workflows/security-fix-pr.lock.yml
@@ -24,7 +24,7 @@
 name: "Security Fix PR"
 "on":
   schedule:
-  - cron: "2 */4 * * *"
+  - cron: "44 */4 * * *"
     # Friendly format: every 4h (scattered)
   # skip-if-match: is:pr is:open in:title "[security-fix]" # Skip-if-match processed as search check in pre-activation job
   workflow_dispatch:
diff --git a/.github/workflows/semantic-function-refactor.lock.yml b/.github/workflows/semantic-function-refactor.lock.yml
index 5174f0ec5a..0c344dcd34 100644
--- a/.github/workflows/semantic-function-refactor.lock.yml
+++ b/.github/workflows/semantic-function-refactor.lock.yml
@@ -28,7 +28,7 @@
 name: "Semantic Function Refactoring"
 "on":
   schedule:
-  - cron: "53 14 * * *"
+  - cron: "3 11 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/sergo.lock.yml b/.github/workflows/sergo.lock.yml
index 3e8090ca4e..00ded56ced 100644
--- a/.github/workflows/sergo.lock.yml
+++ b/.github/workflows/sergo.lock.yml
@@ -28,7 +28,7 @@
 name: "Sergo - Serena Go Expert"
 "on":
   schedule:
-  - cron: "53 8 * * *"
+  - cron: "15 22 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/smoke-claude.lock.yml b/.github/workflows/smoke-claude.lock.yml
index a7317cf9f2..32c94c6ee4 100644
--- a/.github/workflows/smoke-claude.lock.yml
+++ b/.github/workflows/smoke-claude.lock.yml
@@ -36,7 +36,7 @@ name: "Smoke Claude"
     types:
     - labeled
   schedule:
-  - cron: "27 */12 * * *"
+  - cron: "37 */12 * * *"
   workflow_dispatch: null
 
 permissions: {}
diff --git a/.github/workflows/smoke-codex.lock.yml b/.github/workflows/smoke-codex.lock.yml
index dc901fd92a..705edeb47e 100644
--- a/.github/workflows/smoke-codex.lock.yml
+++ b/.github/workflows/smoke-codex.lock.yml
@@ -35,7 +35,7 @@ name: "Smoke Codex"
     types:
     - labeled
   schedule:
-  - cron: "16 */12 * * *"
+  - cron: "58 */12 * * *"
   workflow_dispatch: null
 
 permissions: {}
diff --git a/.github/workflows/smoke-copilot.lock.yml b/.github/workflows/smoke-copilot.lock.yml
index ae9a82f1b3..243cccfe84 100644
--- a/.github/workflows/smoke-copilot.lock.yml
+++ b/.github/workflows/smoke-copilot.lock.yml
@@ -33,7 +33,7 @@ name: "Smoke Copilot"
     types:
     - labeled
   schedule:
-  - cron: "1 */12 * * *"
+  - cron: "55 */12 * * *"
   workflow_dispatch: null
 
 permissions: {}
diff --git a/.github/workflows/smoke-opencode.lock.yml b/.github/workflows/smoke-opencode.lock.yml
index 01e9975c73..07ab7e9317 100644
--- a/.github/workflows/smoke-opencode.lock.yml
+++ b/.github/workflows/smoke-opencode.lock.yml
@@ -33,7 +33,7 @@ name: "Smoke OpenCode"
     types:
     - labeled
   schedule:
-  - cron: "10 11 * * *"
+  - cron: "52 11 * * *"
   workflow_dispatch: null
 
 permissions: {}
diff --git a/.github/workflows/static-analysis-report.lock.yml b/.github/workflows/static-analysis-report.lock.yml
index 9d63a3830f..140b64330c 100644
--- a/.github/workflows/static-analysis-report.lock.yml
+++ b/.github/workflows/static-analysis-report.lock.yml
@@ -29,7 +29,7 @@
 name: "Static Analysis Report"
 "on":
   schedule:
-  - cron: "21 14 * * *"
+  - cron: "11 10 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/step-name-alignment.lock.yml b/.github/workflows/step-name-alignment.lock.yml
index 8d0ead40d1..f95b0679fc 100644
--- a/.github/workflows/step-name-alignment.lock.yml
+++ b/.github/workflows/step-name-alignment.lock.yml
@@ -24,7 +24,7 @@
 name: "Step Name Alignment"
 "on":
   schedule:
-  - cron: "19 2 * * *"
+  - cron: "25 0 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/sub-issue-closer.lock.yml b/.github/workflows/sub-issue-closer.lock.yml
index 29a7b685da..46fd184fab 100644
--- a/.github/workflows/sub-issue-closer.lock.yml
+++ b/.github/workflows/sub-issue-closer.lock.yml
@@ -24,7 +24,7 @@
 name: "Sub-Issue Closer"
 "on":
   schedule:
-  - cron: "42 23 * * *"
+  - cron: "36 16 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/terminal-stylist.lock.yml b/.github/workflows/terminal-stylist.lock.yml
index 0b39fb7e38..6202d2352e 100644
--- a/.github/workflows/terminal-stylist.lock.yml
+++ b/.github/workflows/terminal-stylist.lock.yml
@@ -24,7 +24,7 @@
 name: "Terminal Stylist"
 "on":
   schedule:
-  - cron: "28 8 * * *"
+  - cron: "10 20 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/ubuntu-image-analyzer.lock.yml b/.github/workflows/ubuntu-image-analyzer.lock.yml
index 290fbab2fb..bb04b92c51 100644
--- a/.github/workflows/ubuntu-image-analyzer.lock.yml
+++ b/.github/workflows/ubuntu-image-analyzer.lock.yml
@@ -24,7 +24,7 @@
 name: "Ubuntu Actions Image Analyzer"
 "on":
   schedule:
-  - cron: "21 15 * * *"
+  - cron: "39 21 * * *"
     # Friendly format: daily (scattered)
   # skip-if-match: is:pr is:open in:title "[ubuntu-image]" # Skip-if-match processed as search check in pre-activation job
   workflow_dispatch:
diff --git a/.github/workflows/unbloat-docs.lock.yml b/.github/workflows/unbloat-docs.lock.yml
index 02ef8e3db1..1319b88c06 100644
--- a/.github/workflows/unbloat-docs.lock.yml
+++ b/.github/workflows/unbloat-docs.lock.yml
@@ -33,7 +33,7 @@ name: "Documentation Unbloat"
     - created
     - edited
   schedule:
-  - cron: "46 14 * * *"
+  - cron: "16 3 * * *"
   workflow_dispatch: null
 
 permissions: {}
diff --git a/.github/workflows/workflow-health-manager.lock.yml b/.github/workflows/workflow-health-manager.lock.yml
index e16d32b3ea..45e8824ddf 100644
--- a/.github/workflows/workflow-health-manager.lock.yml
+++ b/.github/workflows/workflow-health-manager.lock.yml
@@ -28,7 +28,7 @@
 name: "Workflow Health Manager - Meta-Orchestrator"
 "on":
   schedule:
-  - cron: "13 2 * * *"
+  - cron: "15 22 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/workflow-normalizer.lock.yml b/.github/workflows/workflow-normalizer.lock.yml
index bf96d1b0a2..de185f631c 100644
--- a/.github/workflows/workflow-normalizer.lock.yml
+++ b/.github/workflows/workflow-normalizer.lock.yml
@@ -29,7 +29,7 @@
 name: "Workflow Normalizer"
 "on":
   schedule:
-  - cron: "8 12 * * *"
+  - cron: "34 0 * * *"
     # Friendly format: daily (scattered)
   workflow_dispatch:
 
diff --git a/.github/workflows/workflow-skill-extractor.lock.yml b/.github/workflows/workflow-skill-extractor.lock.yml
index 33ff60a3e9..13280449c9 100644
--- a/.github/workflows/workflow-skill-extractor.lock.yml
+++ b/.github/workflows/workflow-skill-extractor.lock.yml
@@ -28,7 +28,7 @@
 name: "Workflow Skill Extractor"
 "on":
   schedule:
-  - cron: "5 0 * * 2"
+  - cron: "31 0 * * 5"
     # Friendly format: weekly (scattered)
   workflow_dispatch:
 
diff --git a/pkg/cli/init_test.go b/pkg/cli/init_test.go
index 21ed1253a3..151ba59111 100644
--- a/pkg/cli/init_test.go
+++ b/pkg/cli/init_test.go
@@ -467,16 +467,18 @@ func TestCreateCampaignLabel(t *testing.T) {
 
 	// This test verifies the function can handle both success and failure cases gracefully
 	t.Run("handles error gracefully when not in repository context", func(t *testing.T) {
-		// Create a temp directory that's not a git repo
-		tmpDir := testutil.TempDir(t, "test-*")
-
 		originalDir, err := os.Getwd()
 		if err != nil {
 			t.Fatalf("Failed to get current directory: %v", err)
 		}
-		defer func() {
+		
+		// Create a temp directory that's not a git repo
+		tmpDir := testutil.TempDir(t, "test-*")
+
+		// Ensure we change back before temp directory is cleaned up
+		t.Cleanup(func() {
 			_ = os.Chdir(originalDir)
-		}()
+		})
 
 		if err := os.Chdir(tmpDir); err != nil {
 			t.Fatalf("Failed to change to temp directory: %v", err)
@@ -491,16 +493,18 @@ func TestCreateCampaignLabel(t *testing.T) {
 	})
 
 	t.Run("handles error gracefully in verbose mode", func(t *testing.T) {
-		// Create a temp directory that's not a git repo
-		tmpDir := testutil.TempDir(t, "test-*")
-
 		originalDir, err := os.Getwd()
 		if err != nil {
 			t.Fatalf("Failed to get current directory: %v", err)
 		}
-		defer func() {
+		
+		// Create a temp directory that's not a git repo
+		tmpDir := testutil.TempDir(t, "test-*")
+
+		// Ensure we change back before temp directory is cleaned up
+		t.Cleanup(func() {
 			_ = os.Chdir(originalDir)
-		}()
+		})
 
 		if err := os.Chdir(tmpDir); err != nil {
 			t.Fatalf("Failed to change to temp directory: %v", err)
diff --git a/pkg/workflow/action_pins_test.go b/pkg/workflow/action_pins_test.go
index 66550e36ce..fc48414ff5 100644
--- a/pkg/workflow/action_pins_test.go
+++ b/pkg/workflow/action_pins_test.go
@@ -397,7 +397,7 @@ func TestGetActionPinByRepo(t *testing.T) {
 			repo:         "actions/setup-node",
 			expectExists: true,
 			expectRepo:   "actions/setup-node",
-			expectVer:    "v6.1.0",
+			expectVer:    "v6.2.0",
 		},
 		{
 			repo:         "unknown/action",
@@ -594,14 +594,14 @@ func TestGetActionPinSemverPreference(t *testing.T) {
 		expectedVersion string
 	}{
 		{
-			name:            "setup-go prefers v6.1.0 over v6",
+			name:            "setup-go prefers v6.2.0 over v6",
 			repo:            "actions/setup-go",
-			expectedVersion: "v6.1.0",
+			expectedVersion: "v6.2.0",
 		},
 		{
-			name:            "setup-node prefers v6.1.0 over v6",
+			name:            "setup-node prefers v6.2.0 over v6",
 			repo:            "actions/setup-node",
-			expectedVersion: "v6.1.0",
+			expectedVersion: "v6.2.0",
 		},
 		{
 			name:            "upload-artifact prefers v6.0.0 over v5 and v4",
@@ -653,10 +653,10 @@ func TestGetActionPinWithData_SemverPreference(t *testing.T) {
 		shouldFallback bool // Whether we expect to fall back to highest version
 	}{
 		{
-			name:           "exact match for setup-go v6.1.0",
+			name:           "exact match for setup-go v6.2.0",
 			repo:           "actions/setup-go",
-			requestedVer:   "v6.1.0",
-			expectedVer:    "v6.1.0",
+			requestedVer:   "v6.2.0",
+			expectedVer:    "v6.2.0",
 			strictMode:     false,
 			shouldFallback: false,
 		},
@@ -664,7 +664,7 @@ func TestGetActionPinWithData_SemverPreference(t *testing.T) {
 			name:           "exact match for setup-go v6 from hardcoded pins",
 			repo:           "actions/setup-go",
 			requestedVer:   "v6",
-			expectedVer:    "v6", // Should match exactly v6, not v6.1.0
+			expectedVer:    "v6", // Should match exactly v6, not v6.2.0
 			strictMode:     false,
 			shouldFallback: false,
 		},
diff --git a/pkg/workflow/compiler_safe_outputs_config.go b/pkg/workflow/compiler_safe_outputs_config.go
index abf6cdaee5..c9db00636d 100644
--- a/pkg/workflow/compiler_safe_outputs_config.go
+++ b/pkg/workflow/compiler_safe_outputs_config.go
@@ -7,21 +7,21 @@ import (
 	"github.com/githubnext/gh-aw/pkg/logger"
 )
 
-var compilerSafeOutputsLog = logger.New("workflow:compiler_safe_outputs_config")
+var compilerSafeOutputsConfigLog = logger.New("workflow:compiler_safe_outputs_config")
 
 func (c *Compiler) addHandlerManagerConfigEnvVar(steps *[]string, data *WorkflowData) {
 	if data.SafeOutputs == nil {
-		compilerSafeOutputsLog.Print("No safe-outputs configuration, skipping handler manager config")
+		compilerSafeOutputsConfigLog.Print("No safe-outputs configuration, skipping handler manager config")
 		return
 	}
 
-	compilerSafeOutputsLog.Print("Building handler manager configuration for safe-outputs")
+	compilerSafeOutputsConfigLog.Print("Building handler manager configuration for safe-outputs")
 	config := make(map[string]map[string]any)
 
 	// Add config for each enabled safe output type with their options
 	// Presence in config = enabled, so no need for "enabled": true field
 	if data.SafeOutputs.CreateIssues != nil {
-		compilerSafeOutputsLog.Print("Adding create_issue handler configuration")
+		compilerSafeOutputsConfigLog.Print("Adding create_issue handler configuration")
 		cfg := data.SafeOutputs.CreateIssues
 		handlerConfig := make(map[string]any)
 		if cfg.Max > 0 {
@@ -526,7 +526,7 @@ func (c *Compiler) addHandlerManagerConfigEnvVar(steps *[]string, data *Workflow
 
 	// Only add the env var if there are handlers to configure
 	if len(config) > 0 {
-		compilerSafeOutputsLog.Printf("Marshaling handler config with %d handlers", len(config))
+		compilerSafeOutputsConfigLog.Printf("Marshaling handler config with %d handlers", len(config))
 		configJSON, err := json.Marshal(config)
 		if err != nil {
 			consolidatedSafeOutputsLog.Printf("Failed to marshal handler config: %v", err)
@@ -535,9 +535,9 @@ func (c *Compiler) addHandlerManagerConfigEnvVar(steps *[]string, data *Workflow
 		// Escape the JSON for YAML (handle quotes and special chars)
 		configStr := string(configJSON)
 		*steps = append(*steps, fmt.Sprintf("          GH_AW_SAFE_OUTPUTS_HANDLER_CONFIG: %q\n", configStr))
-		compilerSafeOutputsLog.Printf("Added handler config env var: size=%d bytes", len(configStr))
+		compilerSafeOutputsConfigLog.Printf("Added handler config env var: size=%d bytes", len(configStr))
 	} else {
-		compilerSafeOutputsLog.Print("No handlers configured, skipping config env var")
+		compilerSafeOutputsConfigLog.Print("No handlers configured, skipping config env var")
 	}
 }
 
@@ -546,11 +546,11 @@ func (c *Compiler) addHandlerManagerConfigEnvVar(steps *[]string, data *Workflow
 // These handlers require GH_AW_PROJECT_GITHUB_TOKEN and are processed separately from the main handler manager.
 func (c *Compiler) addProjectHandlerManagerConfigEnvVar(steps *[]string, data *WorkflowData) {
 	if data.SafeOutputs == nil {
-		compilerSafeOutputsLog.Print("No safe-outputs configuration, skipping project handler config")
+		compilerSafeOutputsConfigLog.Print("No safe-outputs configuration, skipping project handler config")
 		return
 	}
 
-	compilerSafeOutputsLog.Print("Building project handler manager configuration")
+	compilerSafeOutputsConfigLog.Print("Building project handler manager configuration")
 	config := make(map[string]map[string]any)
 
 	// Add config for project-related safe output types
diff --git a/pkg/workflow/data/action_pins.json b/pkg/workflow/data/action_pins.json
index 9326fe7c8f..35fb500e46 100644
--- a/pkg/workflow/data/action_pins.json
+++ b/pkg/workflow/data/action_pins.json
@@ -1,14 +1,14 @@
 {
   "entries": {
-    "actions/ai-inference@v2": {
+    "actions/ai-inference@v2.0.5": {
       "repo": "actions/ai-inference",
-      "version": "v2",
-      "sha": "334892bb203895caaed82ec52d23c1ed9385151e"
+      "version": "v2.0.5",
+      "sha": "a6101c89c6feaecc585efdd8d461f18bb7896f20"
     },
-    "actions/attest-build-provenance@v2": {
+    "actions/attest-build-provenance@v2.4.0": {
       "repo": "actions/attest-build-provenance",
-      "version": "v2",
-      "sha": "96b4a1ef7235a096b17240c259729fdd70c83d45"
+      "version": "v2.4.0",
+      "sha": "e8998f949152b193b063cb0ec769d69d929409be"
     },
     "actions/cache/restore@v4.3.0": {
       "repo": "actions/cache/restore",
@@ -25,9 +25,9 @@
       "version": "v4.3.0",
       "sha": "0057852bfaa89a56745cba8c7296529d2fc39830"
     },
-    "actions/checkout@v4": {
+    "actions/checkout@v4.3.1": {
       "repo": "actions/checkout",
-      "version": "v4",
+      "version": "v4.3.1",
       "sha": "34e114876b0b11c390a56381ad16ebd13914f8d5"
     },
     "actions/checkout@v5.0.1": {
@@ -40,24 +40,19 @@
       "version": "v2.2.1",
       "sha": "29824e69f54612133e76f7eaac726eef6c875baf"
     },
-    "actions/download-artifact@v6.0.0": {
+    "actions/download-artifact@v6": {
       "repo": "actions/download-artifact",
-      "version": "v6.0.0",
+      "version": "v6",
       "sha": "018cc2cf5baa6db3ef3c5f8a56943fffe632ef53"
     },
-    "actions/github-script@v7": {
+    "actions/github-script@v7.1.0": {
       "repo": "actions/github-script",
-      "version": "v7",
+      "version": "v7.1.0",
       "sha": "f28e40c7f34bde8b3046d885e986cb6290c5673b"
     },
-    "actions/github-script@v7.0.1": {
-      "repo": "actions/github-script",
-      "version": "v7.0.1",
-      "sha": "60a0d83039c74a4aee543508d2ffcb1c3799cdea"
-    },
-    "actions/github-script@v8.0.0": {
+    "actions/github-script@v8": {
       "repo": "actions/github-script",
-      "version": "v8.0.0",
+      "version": "v8",
       "sha": "ed597411d8f924073f98dfc5c65a23a2325f34cd"
     },
     "actions/setup-dotnet@v4": {
@@ -65,31 +60,21 @@
       "version": "v4.3.1",
       "sha": "67a3573c9a986a3f9c594539f4ab511d57bb3ce9"
     },
-    "actions/setup-go@v6": {
+    "actions/setup-go@v6.2.0": {
       "repo": "actions/setup-go",
-      "version": "v6",
+      "version": "v6.2.0",
       "sha": "7a3fe6cf4cb3a834922a1244abfce67bcef6a0c5"
     },
-    "actions/setup-go@v6.1.0": {
-      "repo": "actions/setup-go",
-      "version": "v6.1.0",
-      "sha": "4dc6199c7b1a012772edbd06daecab0f50c9053c"
-    },
     "actions/setup-java@v4": {
       "repo": "actions/setup-java",
       "version": "v4.8.0",
       "sha": "c1e323688fd81a25caa38c78aa6df2d33d3e20d9"
     },
-    "actions/setup-node@v6": {
+    "actions/setup-node@v6.2.0": {
       "repo": "actions/setup-node",
-      "version": "v6",
+      "version": "v6.2.0",
       "sha": "6044e13b5dc448c55e2357c09f80417699197238"
     },
-    "actions/setup-node@v6.1.0": {
-      "repo": "actions/setup-node",
-      "version": "v6.1.0",
-      "sha": "395ad3262231945c25e8478fd5baf05154b1d79f"
-    },
     "actions/setup-python@v5.6.0": {
       "repo": "actions/setup-python",
       "version": "v5.6.0",
@@ -100,30 +85,20 @@
       "version": "v4.6.2",
       "sha": "ea165f8d65b6e75b540449e92b4886f43607fa02"
     },
-    "actions/upload-artifact@v5.0.0": {
+    "actions/upload-artifact@v5": {
       "repo": "actions/upload-artifact",
-      "version": "v5.0.0",
+      "version": "v5",
       "sha": "330a01c490aca151604b8cf639adc76d48f6c5d4"
     },
-    "actions/upload-artifact@v6.0.0": {
+    "actions/upload-artifact@v6": {
       "repo": "actions/upload-artifact",
-      "version": "v6.0.0",
+      "version": "v6",
       "sha": "b7c566a772e6b6bfb58ed0dc250532a479d7789f"
     },
-    "anchore/sbom-action@v0": {
-      "repo": "anchore/sbom-action",
-      "version": "v0",
-      "sha": "0b82b0b1a22399a1c542d4d656f70cd903571b5c"
-    },
-    "anchore/sbom-action@v0.20.10": {
+    "anchore/sbom-action@v0.22.0": {
       "repo": "anchore/sbom-action",
-      "version": "v0.20.10",
-      "sha": "fbfd9c6c189226748411491745178e0c2017392d"
-    },
-    "anchore/sbom-action@v0.20.11": {
-      "repo": "anchore/sbom-action",
-      "version": "v0.20.11",
-      "sha": "43a17d6e7add2b5535efe4dcae9952337c479a93"
+      "version": "v0.22.0",
+      "sha": "62ad5284b8ced813296287a0b63906cb364b73ee"
     },
     "astral-sh/setup-uv@v5.4.2": {
       "repo": "astral-sh/setup-uv",
@@ -140,24 +115,24 @@
       "version": "v2.0.3",
       "sha": "e95548e56dfa95d4e1a28d6f422fafe75c4c26fb"
     },
-    "docker/build-push-action@v6": {
+    "docker/build-push-action@v6.18.0": {
       "repo": "docker/build-push-action",
-      "version": "v6",
+      "version": "v6.18.0",
       "sha": "263435318d21b8e681c14492fe198d362a7d2c83"
     },
-    "docker/login-action@v3": {
+    "docker/login-action@v3.6.0": {
       "repo": "docker/login-action",
-      "version": "v3",
+      "version": "v3.6.0",
       "sha": "5e57cd118135c172c3672efd75eb46360885c0ef"
     },
-    "docker/metadata-action@v5": {
+    "docker/metadata-action@v5.10.0": {
       "repo": "docker/metadata-action",
-      "version": "v5",
+      "version": "v5.10.0",
       "sha": "c299e40c65443455700f0fdfc63efafe5b349051"
     },
-    "docker/setup-buildx-action@v3": {
+    "docker/setup-buildx-action@v3.12.0": {
       "repo": "docker/setup-buildx-action",
-      "version": "v3",
+      "version": "v3.12.0",
       "sha": "8d2750c68a42422c14e847fe6c8ac0403b4cbd6f"
     },
     "erlef/setup-beam@v1": {
@@ -165,45 +140,35 @@
       "version": "v1.20.4",
       "sha": "dff508cca8ce57162e7aa6c4769a4f97c2fed638"
     },
-    "github/codeql-action/upload-sarif@v3": {
+    "github/codeql-action/upload-sarif@v3.31.10": {
       "repo": "github/codeql-action/upload-sarif",
-      "version": "v3.31.9",
-      "sha": "70c165ac82ca0e33a10e9741508dd0ccb4dcf080"
-    },
-    "github/stale-repos@v3": {
-      "repo": "github/stale-repos",
-      "version": "v3",
-      "sha": "3477b6488008d9411aaf22a0924ec7c1f6a69980"
+      "version": "v3.31.10",
+      "sha": "3c8d1abf587ffce02620e8b44b3f91275ccbbd7d"
     },
     "github/stale-repos@v3.0.2": {
       "repo": "github/stale-repos",
       "version": "v3.0.2",
       "sha": "a21e55567b83cf3c3f3f9085d3038dc6cee02598"
     },
-    "haskell-actions/setup@v2": {
+    "haskell-actions/setup@v2.10.3": {
       "repo": "haskell-actions/setup",
-      "version": "v2.9.1",
-      "sha": "55073cbd0e96181a9abd6ff4e7d289867dffc98d"
+      "version": "v2.10.3",
+      "sha": "9cd1b7bf3f36d5a3c3b17abc3545bfb5481912ea"
     },
-    "oven-sh/setup-bun@v2": {
+    "oven-sh/setup-bun@v2.1.2": {
       "repo": "oven-sh/setup-bun",
-      "version": "v2.0.2",
-      "sha": "735343b667d3e6f658f44d0eca948eb6282f2b76"
+      "version": "v2.1.2",
+      "sha": "3d267786b128fe76c2f16a390aa2448b815359f3"
     },
-    "ruby/setup-ruby@v1": {
+    "ruby/setup-ruby@v1.286.0": {
       "repo": "ruby/setup-ruby",
-      "version": "v1.275.0",
-      "sha": "d354de180d0c9e813cfddfcbdc079945d4be589b"
-    },
-    "super-linter/super-linter@v8.2.1": {
-      "repo": "super-linter/super-linter",
-      "version": "v8.2.1",
-      "sha": "2bdd90ed3262e023ac84bf8fe35dc480721fc1f2"
+      "version": "v1.286.0",
+      "sha": "90be1154f987f4dc0fe0dd0feedac9e473aa4ba8"
     },
-    "super-linter/super-linter@v8.3.1": {
+    "super-linter/super-linter@v8.3.2": {
       "repo": "super-linter/super-linter",
-      "version": "v8.3.1",
-      "sha": "47984f49b4e87383eed97890fe2dca6063bbd9c3"
+      "version": "v8.3.2",
+      "sha": "d5b0a2ab116623730dd094f15ddc1b6b25bf7b99"
     }
   }
 }