Remove GitHub App authentication from tools.github in agentic workflows (#1973)

* Initial plan

* Remove tools.github.app and safe-outputs.app from all workflows

- Remove app authentication from safe-outputs in all 10 workflows
- Remove app authentication from tools.github in all 10 workflows
- Recompile all workflows to generate updated lock files
- Workflows now use default GITHUB_TOKEN instead of GitHub App

Co-authored-by: devantler <[email protected]>

* Restore app auth in safe-outputs (keep removed from tools.github)

- Add back app: section to safe-outputs in all 10 workflows
- Keep tools.github without app authentication (use GitHub token)
- Recompile all workflows with corrected configuration

Co-authored-by: devantler <[email protected]>

---------

Co-authored-by: copilot-swe-agent[bot] <[email protected]>
Co-authored-by: devantler <[email protected]>

Author: Copilot

.github/workflows/agentics-maintenance.yml

@@ -1,12 +1,12 @@
 #
-#    ___                   _   _
-#   / _ \                 | | (_)
-#  | |_| | __ _  ___ _ __ | |_ _  ___
+#    ___                   _   _      
+#   / _ \                 | | (_)     
+#  | |_| | __ _  ___ _ __ | |_ _  ___ 
 #  |  _  |/ _` |/ _ \ '_ \| __| |/ __|
-#  | | | | (_| |  __/ | | | |_| | (__
+#  | | | | (_| |  __/ | | | |_| | (__ 
 #  \_| |_/\__, |\___|_| |_|\__|_|\___|
 #          __/ |
-#  _    _ |___/
+#  _    _ |___/ 
 # | |  | |                / _| |
 # | |  | | ___ _ __ _  __| |_| | _____      ____
 # | |/\| |/ _ \ '__| |/ /|  _| |/ _ \ \ /\ / / ___|
@@ -21,10 +21,10 @@
 #
 # Alternative regeneration methods:
 # make recompile
-#
+# 
 # Or use the gh-aw CLI directly:
 # ./gh-aw compile --validate --verbose
-#
+# 
 # The workflow is generated when any workflow uses the 'expires' field
 # in create-discussions or create-issues safe-outputs configuration.
 # Schedule frequency is automatically determined by the shortest expiration time.
@@ -33,7 +33,7 @@ name: Agentic Maintenance
 
 on:
   schedule:
-    - cron: "37 0 * * *" # Daily (based on minimum expires: 7 days)
+    - cron: "37 0 * * *"  # Daily (based on minimum expires: 7 days)
   workflow_dispatch:
 
 permissions: {}