Upgrade to gh-aw 0.68.3 and compile all workflow

[tadelesh]

No real workflow change. Just consolidate version and compile gh aw.

@benbp Please help to review this PR.

[Copilot]

Pull request overview

This PR updates the repository’s GitHub Agentic Workflows (gh-aw) artifacts to align with gh-aw v0.68.3 and regenerates the affected workflow lock files.

Changes:

• Regenerated mgmt-review.lock.yml with gh-aw v0.68.3 (updated pinned action SHAs, container images, and compiled workflow scaffolding).
• Updated issue-triage.lock.yml runner/permissions as part of the recompile.
• Updated gh-aw documentation links and the local action lock registry.

Reviewed changes

Copilot reviewed 4 out of 4 changed files in this pull request and generated 4 comments.

File	Description
.github/workflows/mgmt-review.lock.yml	Recompiled lock file for the management PR review workflow using gh-aw v0.68.3 and updated pinned dependencies/images.
.github/workflows/issue-triage.lock.yml	Recompiled lock file for issue triage; changes include runner label and expanded job permissions.
.github/aw/actions-lock.json	Updated locked action refs; adds additional entries beyond the versions referenced by current workflows.
.github/agents/agentic-workflows.agent.md	Updated documentation links to gh-aw v0.68.3 prompt/config references.

Comments suppressed due to low confidence (2)

.github/workflows/issue-triage.lock.yml:85

• PR description says “No real workflow change”, but this hunk changes the runner label and expands token permissions (adds discussions: write and changes pull-requests to write). Please either update the PR description to reflect these functional/security-impacting changes or adjust the compiled workflow to keep behavior/permissions equivalent to the prior version.

    runs-on: ubuntu-slim
    permissions:
      actions: read
      contents: read
      discussions: write
      issues: write
      pull-requests: write

.github/workflows/issue-triage.lock.yml:1381

• The safe_outputs job is granted discussions: write and pull-requests: write. If this workflow’s safe outputs are intended to operate only on issues, please disable PR/discussion targets in the workflow source so the compiled lock file can drop these write permissions.

    runs-on: ubuntu-slim
    permissions:
      contents: read
      discussions: write
      issues: write
      pull-requests: write

[tadelesh]

@benbp Could you help to approve this?