[plan] Address DeepReport Intelligence Briefing findings (Dec 23, 2025)

[github-actions]

Overview

This tracking issue covers the implementation of quick-win improvements identified in the DeepReport Intelligence Briefing from December 23, 2025.

Source: Discussion #7407

Key Findings

The intelligence report reveals three critical issues affecting the repository:

1. High firewall denial rate (~30%): Copilot workflows lack GitHub MCP configuration, blocking GitHub API access
2. Token spend concentration: Hourly CI Cleaner accounts for 29% of Copilot token spend ($5-7/month potential savings)
3. Workflow reliability issues: 36 of last 50 runs failed, largely due to issues with copilot/create-custom-action-setup-activation branch

Planned Sub-Issues

1. Standardize GitHub MCP configuration across Copilot workflows
2. Optimize Hourly CI Cleaner token usage with schedule reduction
3. Add no-op early exit guard to Hourly CI Cleaner
4. Investigate and fix copilot/create-custom-action-setup-activation failures
5. Add package/CDN allowlists to firewall configuration

Expected Impact

• Reduce firewall denial rate from ~30% to <10%
• Cut Copilot token spend by 29% ($5-7/month savings)
• Improve workflow reliability from 20% to >80% success rate
• Enable proper GitHub API access for Copilot workflows

AI generated by Plan Command for discussion #7407