Add copilot-requests: write to all .github/workflows

[Copilot]

All 5 agentic workflows in .github/workflows lacked the copilot-requests: write permission required by the Copilot API.

Changes

• Source .md files — replaced permissions: read-all (string shorthand) with the explicit object form that preserves full read access and adds the write permission:

  permissions:
    all: read
    copilot-requests: write

• Lock files — recompiled all 5 .lock.yml files; copilot-requests: write now appears in the relevant compiled jobs

Affected workflows: daily-repo-goals, daily-workflow-sync, import-workflow, link-checker, maintainer.

[pelikhan]

@copilot replace permissions.all.read with minimal permissions. use gh-aw compile to ensure there are enough.

[Copilot]

@copilot replace permissions.all.read with minimal permissions. use gh-aw compile to ensure there are enough.

Done. Replaced all: read with minimal per-workflow permissions, verified with gh aw compile --validate (0 errors, 0 warnings):

• daily-repo-goals / import-workflow (toolsets: [all]): contents, issues, pull-requests, actions, discussions, security-events read
• maintainer (toolsets: [repos, issues, pull_requests]): contents, issues, pull-requests read
• link-checker (toolsets: [default]): contents, issues, pull-requests read
• daily-workflow-sync (specific tool allowlist): contents, issues, pull-requests read

All workflows retain copilot-requests: write.