ci(repo-assist): trigger downstream workflows on bot-created PRs

PRs created by Repo Assist are authored under GITHUB_TOKEN, which by
design does not trigger pull_request / pull_request_target workflows.
The result was that Lint PR (conventional-commit check) and build did
not run on PRs like #4560 and the bot's malformed title slipped to main.

Wire up `github-token-for-extra-empty-commit` so safe-outputs pushes
one extra empty commit under a PAT, which restores normal CI triggering.
The `GH_AW_CI_TRIGGER_TOKEN` repo secret (fine-grained PAT with
`contents:write`) needs to be created in repo settings for this to
take effect.

Co-Authored-By: Claude Opus 4.7 (1M context) <noreply@anthropic.com>

Author: dbrattli

.github/aw/actions-lock.json

@@ -5,10 +5,10 @@
       "version": "v9.0.0",
       "sha": "d746ffe35508b1917358783b479e04febd2b8f71"
     },
-    "github/gh-aw-actions/setup@v0.69.1": {
+    "github/gh-aw-actions/setup@v0.68.3": {
       "repo": "github/gh-aw-actions/setup",
-      "version": "v0.69.1",
-      "sha": "b2d32ac2825a5c57cb99851c2ca00094d5e131a6"
+      "version": "v0.68.3",
+      "sha": "ba90f2186d7ad780ec640f364005fa24e797b360"
     },
     "github/gh-aw/actions/setup@v0.69.1": {
       "repo": "github/gh-aw/actions/setup",

.github/workflows/repo-assist.lock.yml

@@ -68,11 +68,18 @@ safe-outputs:
     labels: [automation, repo-assist]
     protected-files: fallback-to-issue
     max: 4
+    # Push an extra empty commit under a PAT so that `pull_request` /
+    # `pull_request_target` workflows (e.g. Lint PR, build) actually fire on
+    # PRs created here. Commits authored by GITHUB_TOKEN do not trigger
+    # downstream workflows. Requires the GH_AW_CI_TRIGGER_TOKEN secret to
+    # be set in repo settings (fine-grained PAT with contents:write).
+    github-token-for-extra-empty-commit: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
   push-to-pull-request-branch:
     target: "*"
     title-prefix: "[Repo Assist] "
     max: 4
     protected-files: fallback-to-issue
+    github-token-for-extra-empty-commit: ${{ secrets.GH_AW_CI_TRIGGER_TOKEN }}
   create-issue:
     title-prefix: "[Repo Assist] "
     labels: [automation, repo-assist]