[ca] Document hourly-ci-cleaner tool access issue

[github-actions]

Problem

The hourly-ci-cleaner workflow (run #281 and all subsequent runs) fails to execute CI cleanup tasks because development tools are not available in the agent execution environment.

Root Cause

Agentic workflows with engine: copilot run in two separate jobs:

1. Activation job - Runs setup steps (Install Make, Setup Go, Setup Node.js)
2. Agent job - Runs agent instructions in a separate Docker container

Tools installed in the activation job are not available in the agent job container. The agent only has access to tools specified in the tools: configuration (currently bash and edit).

Evidence

When the agent tries to run CI cleanup commands:

$ make fmt
bash: make: command not found

$ go fmt ./...
bash: go: command not found

Environment check confirms:

• Running as awfuser (uid=1001) without sudo access
• Cannot install packages with apt-get
• Tools not found in PATH

Impact

• ❌ CI cleanup workflow non-functional (run Coding agent decides branch name and commits files #281 failed)
• ❌ Failed CI runs on main branch not automatically fixed
• ❌ Manual intervention required for all CI failures

This PR

Adds documentation to docs/issues/hourly-ci-cleaner-tool-access.md explaining:

• The issue and root cause
• Current impact on the repository
• Proposed solutions (convert to regular GitHub Actions or fix tool access)
• Temporary workaround

Proposed Solutions

Option 1: Regular GitHub Actions (Recommended)

Convert to standard GitHub Actions workflow since CI cleanup is deterministic and doesn't require AI decision-making.

Option 2: Fix Tool Access

Investigate how to persist tools from activation job to agent job, or configure agent container with development tools.

Option 3: Hybrid Approach

Use GitHub Actions for tool-dependent commands, agentic workflow only for PR creation.

Next Steps

1. Review this documentation
2. Decide on preferred solution approach
3. Implement fix in separate PR
4. Test with actual CI failure scenario
5. Monitor for reliability

Related

• Workflow: .github/workflows/hourly-ci-cleaner.md
• Failed run: Coding agent decides branch name and commits files #281
• CI status check: Workflow monitors main branch CI (ci.yml)

AI generated by Hourly CI Cleaner

[pelikhan]

@copilot copy the steps from the activation job into the agent job so that the build tools are also available

[Copilot]

@pelikhan I've opened a new pull request, #7299, to work on those changes. Once the pull request is ready, I'll request review from you.