Allow Agentic Triage to emit safe outputs (#11912)

Agentic Triage completed successfully but produced no safe outputs
because shell access blocked the generated `safeoutputs` CLI shim.

- **Workflow configuration**
- Allow only the `safeoutputs` command through the restricted shell
interface.
  - Keep the general CLI proxy disabled.

  ```yaml
  tools:
    bash: [safeoutputs]
    cli-proxy: false
  ```

- **Generated workflow**
- Regenerate the gh-aw lockfile with the safe-output CLI prompt and
required command permissions.

<!-- START COPILOT CODING AGENT SUFFIX -->

- Fixes #11910

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: timotheeguerin <1031227+timotheeguerin@users.noreply.github.com>
Co-authored-by: Timothee Guerin <tiguerin@microsoft.com>

Author: Copilot

.github/workflows/issue-triage.lock.yml

@@ -33,7 +33,7 @@ safe-outputs:
   add-comment:
 
 tools:
-  bash: false
+  bash: [safeoutputs]
   cli-proxy: false
   web-fetch:
   github: