fix(ci): recompile repo-assist with gh-aw v0.71.1 and ignore in dependabot (#99)

Dependabot PR #96 bumped the github/gh-aw-actions setup SHA inside the
auto-generated repo-assist.lock.yml without recompiling, leaving the
lock file (compiled by gh-aw v0.68.3) wired to a v0.71.2 setup action
that no longer ships copilot_driver.cjs at the expected path. The
scheduled run failed with "Cannot find module copilot_driver.cjs".

Recompile the workflow with gh-aw v0.71.1 so the lock file and the
action SHAs it pins agree, and ignore github/gh-aw-actions in
Dependabot so future bumps go through `gh aw upgrade` instead.

Co-authored-by: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: dbrattli

.github/aw/actions-lock.json

@@ -10,10 +10,10 @@
       "version": "v9",
       "sha": "373c709c69115d41ff229c7e5df9f8788daa9553"
     },
-    "github/gh-aw-actions/setup@v0.68.3": {
+    "github/gh-aw-actions/setup@v0.71.1": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.68.3",
-      "sha": "ba90f2186d7ad780ec640f364005fa24e797b360"
+      "version": "v0.71.1",
+      "sha": "239aec45b78c8799417efdd5bc6d8cc036629ec1"
     }
   }
 }

.github/dependabot.yml

@@ -11,6 +11,12 @@ updates:
       interval: "weekly"
     commit-message:
       prefix: "chore"
+    ignore:
+      # Lock file (.github/workflows/repo-assist.lock.yml) is generated by
+      # `gh aw compile`. Bumping action SHAs here without recompiling
+      # desyncs the lock file from its compiler version and breaks the run.
+      # Use `gh aw upgrade` to update gh-aw and regenerate the lock file.
+      - dependency-name: "github/gh-aw-actions*"
   - package-ecosystem: "nuget" # See documentation for possible values
     directory: "/" # Location of package manifests
     schedule: