Mount build tools into agent container for hourly-ci-cleaner

[Copilot]

The hourly-ci-cleaner agent runs inside an AWF container and cannot access build tools (make, go, node, npm) installed on the GitHub Actions runner host, causing "command not found" errors when attempting CI fixes.

Changes

Added sandbox.agent.mounts configuration to mount required build tools from host into container:

sandbox:
  agent:
    mounts:
      - "/usr/bin/make:/usr/bin/make:ro"
      - "/usr/bin/go:/usr/bin/go:ro"
      - "/usr/local/bin/node:/usr/local/bin/node:ro"
      - "/usr/local/bin/npm:/usr/local/bin/npm:ro"
      - "/usr/local/lib/node_modules:/usr/local/lib/node_modules:ro"
      - "/opt/hostedtoolcache/go:/opt/hostedtoolcache/go:ro"

The setup steps in the workflow remain unchanged - they ensure tools are available on the host. The mounts make them accessible inside the agent's execution environment where make fmt, make lint, make test-unit, and make recompile commands are invoked.

---

💬 We'd love your input! Share your thoughts on Copilot coding agent in our 2 minute survey.

[pelikhan]

@copilot disable firewall for hourly ci cleaner workflow