remove max-runs

[dsyme]

See https://github.com/githubnext/gh-aw-internal/pull/764/

This PR completely removes the max-runs feature from gh-aw workflows as requested, while preserving the existing stop-time functionality for cost control.

Changes Made

Core Implementation:

• Removed MaxRuns field from WorkflowData struct
• Removed max-runs parsing from workflow frontmatter processing
• Updated generateSafetyChecks() function to only handle stop-time checks
• Updated JSON schema to reject max-runs field with proper validation

Documentation Updates:

• Updated docs/frontmatter.md to remove max-runs section
• Updated docs/workflow-structure.md examples
• Updated instruction templates in pkg/cli/templates/
• Updated .github/instructions/ files

Workflow Updates:

• Removed max-runs: 1 from .github/workflows/daily-qa.md
• Updated schema tests to remove max-runs test cases

Validation

The implementation has been thoroughly tested:

# max-runs is now properly rejected
$ ./gh-aw compile workflow-with-max-runs.md
✗ error: additional properties 'max-runs' not allowed

# stop-time continues to work correctly  
$ ./gh-aw compile workflow-with-stop-time.md
✓ workflow-with-stop-time.md

Generated workflows now only include stop-time safety checks that validate the deadline and disable the workflow if the time limit is reached:

- name: Safety checks
  run: |
    # Check stop-time limit
    STOP_TIME="2025-12-31 23:59:59"
    # ... validation logic for stop-time only

All existing tests pass and all 23 workflow files in the repository recompile successfully without the max-runs functionality.

Fixes #684.

Warning

Firewall rules blocked me from connecting to one or more addresses

I tried to connect to the following addresses, but was blocked by firewall rules:

• api.contoso.com
  • Triggering command: /tmp/go-build668954542/b260/cli.test -test.testlogfile=/tmp/go-build668954542/b260/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true (dns block)
  • Triggering command: /tmp/go-build2792383895/b260/cli.test -test.testlogfile=/tmp/go-build2792383895/b260/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true (dns block)
  • Triggering command: /tmp/go-build2075455822/b260/cli.test -test.testlogfile=/tmp/go-build2075455822/b260/testlog.txt -test.paniconexit0 -test.timeout=10m0s -test.v=true (dns block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)