Fix agentic-wiki-writer: add pull-requests permission and default toolset

[Copilot]

The agentic-wiki-writer workflow's triage step inspects PR metadata and changed files on pull_request events, but lacked the permissions and toolset access required to do so.

Changes

• Permissions — Added pull-requests: read and issues: read alongside contents: read
• GitHub toolset — Changed toolsets: [repos] → toolsets: [default] to expose pull_request_read APIs at runtime

permissions:
  contents: read
  issues: read
  pull-requests: read
tools:
  github:
    toolsets: [default]

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.

[Copilot]

Just as a heads up, I was blocked by some firewall rules while working on your feedback. Expand below for details.

Warning

Firewall rules blocked me from connecting to one or more addresses (expand for details)

I tried to connect to the following addresses, but was blocked by firewall rules:

• https://api.github.com/repos/github/gh-aw/git/ref/tags/v0.50.7
  • Triggering command: /usr/bin/gh gh api /repos/github/gh-aw/git/ref/tags/v0.50.7 --jq .object.sha (http block)
• https://api.github.com/repos/githubnext/agentics/actions/workflows
  • Triggering command: /usr/bin/gh gh workflow list --all --json id,name,path,state (http block)

If you need me to access, download, or install something from one of these locations, you can either:

• Configure Actions setup steps to set up my environment, which run before the firewall is enabled
• Add the appropriate URLs or hosts to the custom allowlist in this repository's Copilot coding agent settings (admins only)