Merge branch 'main' into copilot/fix-protected-names-scope

Author: frasermolyneux

.github/workflows/coding-agent-pr-gate.yml

@@ -25,7 +25,7 @@ jobs:
       pull-requests: read
     steps:
       - name: Verify every Agent attestation checkbox is ticked
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const body = context.payload.pull_request.body || '';

.github/workflows/mirror-issue-labels.yml

@@ -23,7 +23,7 @@ jobs:
       issues: read
     steps:
       - name: Copy labels from linked issue(s)
-        uses: actions/github-script@v7
+        uses: actions/github-script@v9
         with:
           script: |
             const body = context.payload.pull_request.body || '';