[docs] Document --push flag safety features (branch validation and user confirmation)

[github-actions]

Documentation Updates - 2026-01-22

This PR updates the CLI documentation to reflect the safety features added to the --push flag in PR #11343.

Changes Made

Updated docs/src/content/docs/setup/cli.md to document the new safety features for --push flag across three commands:

gh aw init --push

• Added remote repository requirement
• Added default branch validation
• Added user confirmation prompt (auto-confirmed in CI)
• Reordered steps to reflect the actual execution flow
• Added "Safety features" section highlighting the protections

gh aw run --push

• Added remote repository requirement
• Added branch validation (default branch or --ref branch)
• Added user confirmation prompt (auto-confirmed in CI)
• Reordered steps to reflect the actual execution flow
• Added "Safety features" section highlighting the protections

gh aw upgrade --push

• Added remote repository requirement
• Added default branch validation
• Added user confirmation prompt (auto-confirmed in CI)
• Reordered steps to reflect the actual execution flow
• Added "Safety features" section highlighting the protections

Safety Features Documented

The documentation now clearly explains that --push includes:

• Remote repository requirement: Prevents errors when no remote is configured
• Branch validation: Ensures pushes only happen on the default branch (prevents accidental pushes to feature branches)
• User confirmation: Interactive prompt before mutating git operations (outside CI)
• CI auto-confirmation: Automatic approval in CI environments (via CI, CONTINUOUS_INTEGRATION, GITHUB_ACTIONS env vars)

Merged PRs Referenced

• Add default branch check and user confirmation to --push flag #11343 - Add default branch check and user confirmation to --push flag

Notes

All merged PRs from the last 24 hours were reviewed. Most already included documentation updates:

• Document, improve visibility, and adjust campaign discovery budget limits #11358 - Campaign discovery budgets (already documented in docs/campaign-discovery-budgets.md)
• Update schema documentation for removed included_file_schema and remove deprecated safe-jobs field #11356 - Schema documentation updates (already completed in the PR)
• Add workflow count output to gh aw list command #11355 - Workflow count output to gh aw list (CLI docs already had the command documented)
• Document features.action-mode: script frontmatter field #11354 - features.action-mode: script frontmatter (already documented in the PR)
• Remove deprecated cache-memory discovery from campaigns #11344 - Remove deprecated cache-memory discovery (internal refactoring, no user-facing changes)

The only documentation gap was the --push flag safety features, which this PR addresses.

AI generated by Daily Documentation Updater