Updating permissions for agentic workflows (#39071)

## Updating permissions for agentic workflows

Adds the `copilot-requests: write` permission to the GitHub Agentic
Workflow definitions and recompiles their generated lock files.

### What changed
- Added `copilot-requests: write` under `permissions:` in each agentic
workflow `.md` source file.
- Recompiled every corresponding `.lock.yml` via `gh aw compile` so the
generated output matches the source.

As a result of recompiling, the workflows now rely on the
`copilot-requests: write` permission instead of the
`COPILOT_GITHUB_TOKEN` secret, so the lock files drop the
`COPILOT_GITHUB_TOKEN` secret reference and its validation step.

### Affected workflows
- agent-observability
- archie
- dash
- dexter
- docs-consistency-check
- fix-test-failures
- issue-triage
- mgmt-guidance
- mgmt-review
- scribe
- sentinel
- tester
- upgrade-agentic-workflows

### Checklist
- [x] Add `copilot-requests: write` permission to workflow `.md` sources
- [x] Recompile `.lock.yml` files from their `.md` counterparts
- [x] Add PR description

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: xirzec <639216+xirzec@users.noreply.github.com>

Author: Copilot

.github/workflows/agent-observability.lock.yml

@@ -28,6 +28,7 @@ permissions:
   actions: read
   pull-requests: read
   issues: read
+  copilot-requests: write
 # DataOps: collect every metric in a deterministic, authenticated shell
 # step (GH_TOKEN → 5000 req/hr, runs outside the agent sandbox). The
 # agent never makes API calls; it only reads /tmp/gh-aw/agent/*.json.