fix(workflows): recompile agentic workflows to gh-aw v0.82.14 for reliable auth

Recompiles both scorecard-monitor and dependabot-autofix locks with gh-aw
v0.82.14. The old scorecard lock (v0.64.2) invoked /usr/local/bin/copilot
directly, which fails auth under the current Copilot CLI inside the sandbox
(No authentication information found). The modern locks route through
copilot_harness.cjs, which handles proxy auth correctly, and pin the Copilot
CLI engine version for reproducibility. Auto-Fix keeps its CI+Security trigger.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>
Copilot-Session: 2e044186-b7f4-4228-b0c9-89ffe9e2922c

Author: dorlugasigal