fix(ci): allow Dependabot to activate the autofix agent (roles: all) (#266)

Follow-up to #263. The autofix `activation` job failed because gh-aw's
default role gate requires write/maintainer/admin, but `dependabot[bot]`
has permission level `none`, so the agent never ran. Adds `roles: all`
under `on:` — the `bots: [dependabot[bot]]` filter still limits
activation to Dependabot. Refs #262.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: dorlugasigal

.github/workflows/dependabot-autofix.lock.yml

@@ -6,6 +6,10 @@ on:
     branches:
       - 'dependabot/**'
   bots: ['dependabot[bot]']
+  # Dependabot has no repo write permission, so gh-aw's default role gate
+  # (admin/maintainer/write) would block activation. Allow all actors — the
+  # `bots:` filter already restricts activation to Dependabot-authored runs.
+  roles: all
   workflow_dispatch:
     inputs:
       pr: