Remove non-strict override from AOAI API key smoke workflow and restore Copilot BYOK env passthrough

[Copilot]

This PR updates the AOAI API key smoke workflow to run under strict mode and fixes BYOK runtime env handling so Copilot provider variables are available inside AWF. Without this, BYOK provider routing/auth could be dropped by --exclude-env.

• Strict-mode workflow source update

  • Removed strict: false from smoke-copilot-aoai-apikey.md so the workflow compiles and executes with strict validation defaults.

• Copilot BYOK env exclusion fix

  • Updated Copilot AWF execution path to stop excluding BYOK provider env vars in BYOK mode:
    • COPILOT_PROVIDER_BASE_URL
    • COPILOT_PROVIDER_API_KEY
    • COPILOT_PROVIDER_BEARER_TOKEN
  • COPILOT_GITHUB_TOKEN exclusion behavior in BYOK mode remains unchanged.

• Generated workflow alignment

  • Recompiled lock workflows so generated AWF commands reflect the corrected --exclude-env behavior (notably AOAI apikey and AOAI entra smoke lockfiles).

• Targeted regression coverage

  • Expanded Copilot BYOK execution test assertions to ensure provider env vars are not emitted as --exclude-env flags in AWF BYOK mode.

if isBYOKMode {
    byokProviderEnvVars := map[string]struct{}{
        constants.CopilotProviderBaseURL:     {},
        constants.CopilotProviderAPIKey:      {},
        constants.CopilotProviderBearerToken: {},
    }
    filtered := make([]string, 0, len(excludeEnvVarNames))
    for _, envVarName := range excludeEnvVarNames {
        if _, drop := byokProviderEnvVars[envVarName]; !drop {
            filtered = append(filtered, envVarName)
        }
    }
    excludeEnvVarNames = filtered
}

[pelikhan]

@copilot remove strict false from the other smoke BYOK workflows

[Copilot]

@copilot remove strict false from the other smoke BYOK workflows

Done in 42cc437 — removed strict: false from the remaining smoke BYOK workflow (smoke-copilot-aoai-entra.md) and recompiled its lockfile.