feat: add workflow-safe signed tool approvals to WorkflowAgent #23085
backport.yml
on: pull_request
Resolve backport PR
3s
Backport to ${{ needs.find-branch.outputs.release-branch }}