feat: add workflow-safe signed tool approvals to WorkflowAgent #23084
backport.yml
on: pull_request
Resolve backport PR
4s
Backport to ${{ needs.find-branch.outputs.release-branch }}