feat: add agentic workflows for CI doctor, doc updater, and code simplifier

[digitarald]

Summary

Adds three GitHub Agentic Workflows to automate repository maintenance:

Workflows

Workflow	Trigger	Purpose
CI Failure Doctor	CI workflow failure/cancellation on main	Investigates failed CI runs, analyzes logs, creates diagnostic issues with root cause analysis
Daily Documentation Updater	Daily schedule + manual	Scans merged PRs from last 24h, identifies doc gaps, opens PRs to update documentation
Code Simplifier	Daily schedule + manual	Analyzes recently modified .ts/.tsx files, proposes simplification PRs validated by test/lint/typecheck/build

Security & Safety

• All workflows use strict: true and read-only permissions
• safe-outputs constrain what each workflow can create (issues, PRs)
• Bash allowlists are scoped to specific commands and paths
• skip-if-match prevents stacking open PRs
• No auto-merge — all PRs require human review
• ci-doctor scopes update-issue to its own issues via title-prefix
• ci-doctor scopes add-comment to issues only (not PRs)

Files

• .github/workflows/ci-doctor.md — CI Doctor workflow source
• .github/workflows/daily-doc-updater.md — Doc Updater workflow source
• .github/workflows/code-simplifier.md — Code Simplifier workflow source
• .github/workflows/*.lock.yml — Compiled GitHub Actions (auto-generated by gh aw compile)
• .github/workflows/agentics-maintenance.yml — gh-aw maintenance workflow
• .github/aw/actions-lock.json — gh-aw lock metadata
• .gitattributes — Marks *.lock.yml as linguist-generated
• .prettierignore — Excludes auto-generated files from prettier

Note on lock file permissions

The compiled .lock.yml files use --allow-all-paths and broad shell tool grants — this is how gh aw compile generates lock files from the source .md frontmatter. The source files define the intended scoping; the lock files are the runtime implementation produced by the compiler.

[Copilot]

Pull request overview

Adds GitHub Agentic Workflows (gh-aw) to automate routine repository maintenance for @microsoft/agentrc (TypeScript CLI + VS Code extension), including CI-failure triage, daily documentation updates, and automated code simplification PRs.

Changes:

• Adds 3 agentic workflow source definitions (.md) for CI Doctor, Daily Doc Updater, and Code Simplifier.
• Adds the corresponding compiled GitHub Actions workflows (*.lock.yml) plus the gh-aw maintenance workflow.
• Adds gh-aw lock metadata and marks compiled lock workflows as generated in .gitattributes.

Reviewed changes

Copilot reviewed 10 out of 10 changed files in this pull request and generated 9 comments.

Show a summary per file

File	Description
.github/workflows/daily-doc-updater.md	Defines the doc-update agent workflow, safe outputs, and tool allowlist.
.github/workflows/daily-doc-updater.lock.yml	Compiled Actions workflow for the doc updater (generated by gh-aw).
.github/workflows/code-simplifier.md	Defines the code-simplification agent workflow, safe outputs, and tool allowlist.
.github/workflows/code-simplifier.lock.yml	Compiled Actions workflow for the code simplifier (generated by gh-aw).
.github/workflows/ci-doctor.md	Defines the CI failure investigation agent workflow and safe outputs.
.github/workflows/ci-doctor.lock.yml	Compiled Actions workflow for CI Doctor (generated by gh-aw).
.github/workflows/agentics-maintenance.yml	Adds the gh-aw maintenance workflow to close expired issues/PRs/discussions.
.github/aw/actions-lock.json	Pins action SHAs used by the generated workflows.
.gitattributes	Marks *.lock.yml as linguist-generated and resolves merges using ours.