merge: main and fix chmod a+r -> a+rX in 2 new lock.yml files from merge

Merged origin/main (e61f158) into branch. Two new lock.yml files added
in main (smoke-gemini.lock.yml, smoke-opencode.lock.yml) also had the
a+r bug - fixed to a+rX as well.

Note: The chmod template is hardcoded in the gh-aw binary itself
(v0.71.1), not in any .md file. The lock.yml edits are required to fix
the artifact upload failures until the upstream gh-aw binary is updated.

Agent-Logs-Url: https://github.com/github/gh-aw-firewall/sessions/a5424e8d-2fff-49d4-a93a-42e216ff0d87

Co-authored-by: lpcox <15877973+lpcox@users.noreply.github.com>

Author: Copilot