Pin Copilot CLI version in grumpy-reviewer to avoid toolcache ENOENT

The runner's toolcache activation path for a cached Copilot CLI only
adds it to PATH and never stages a copy at /usr/local/bin/copilot,
which the AWF sandbox hardcodes and can't resolve via PATH. Pinning
an explicit engine.version forces the exact-match install path, which
always extracts straight into /usr/local/bin/copilot, sidestepping
the buggy cache-hit branch in install_copilot_cli.sh.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

Author: kylegordon

.github/aw/actions-lock.json

@@ -0,0 +1,9 @@
+{
+  "entries": {
+    "github/gh-aw-actions/setup@v0.85.4": {
+      "repo": "github/gh-aw-actions/setup",
+      "version": "v0.85.4",
+      "sha": "2709137ea6c5b0e19aa621454dc643ea8dc526b1"
+    }
+  }
+}

.github/workflows/grumpy-reviewer.lock.yml

@@ -6,6 +6,10 @@ on:
     name: grumpy
     events: [pull_request_comment, pull_request_review_comment]
 
+engine:
+  id: copilot
+  version: "1.0.80"
+
 permissions:
   contents: read
   pull-requests: read