workflows: Pre-install just and gh-aw for drafter and fix

[cgwalters-bot]

The drafter and fix agents are told to run just setup && just compile after editing a workflow, but can't install either tool from inside the AWF sandbox (bootc-dev#109): gh isn't logged in there and api.github.com isn't on the allowlist.

This adds a shared import that sets up both on the runner before the agent starts, which gh-aw supports directly, so no custom runner or container image is needed: custom steps: and runtimes: run outside the firewall (steps and jobs), and AWF exposes the host's binaries and $HOME (where gh keeps extensions) inside the sandbox (host binaries). just comes from apt; the compiler's gh-aw runtime installs the CLI through github/gh-aw-actions/setup-cli at the compiler's own version, which ci.yml already holds to .github/aw/gh-aw-version. A prep commit makes just setup detect the installed CLI with gh aw version, since gh extension list fails when gh isn't logged in.

Side effect of the gh-aw runtime: the compiler adds github.github.com to the agent's allowlist, and GitHub's download hosts to the threat-detection job's.

The ANTHROPIC_API_KEY 401/403 warning on bootc-dev#109 is a false positive, not a secret problem: all 31 model calls through the API proxy returned 200. The two 403s were Squid denying direct connections from the agent container to api.anthropic.com, which the firewall blocks by design (only the API proxy may connect).

Tested on a devspace: lock files recompiled with gh-aw v0.88.2, and recompiling again gives no drift. Inside unshare -rn with no GitHub token, just setup && just compile succeeds, both with the CLI installed as a gh extension and with it installed by setup-cli's manual fallback. The ci.yml node tests pass. actionlint reports the same 28 findings on the workflows as on main, none new. Not run: a live drafter run, since that needs the repository's secrets and App.

Fixes bootc-dev#109

Generated-by: https://github.com/cgwalters/#llms

---

Review draft in cgwalters-forge, not upstream yet. This section is removed when the PR is opened upstream.

• Upstream: bootc-dev/gh-agentic-workflows, base main
• Board item: PVTI_lADOE9oHIs4BlJLczg9wwPw
• Fork CI: off; the devspace testing described above is this PR's CI, and upstream CI runs once it is opened there

To review:

• Approve, or comment /promote on a line of its own, to open it upstream, ready for review. Either covers only the commits pushed so far.
• If upstream requires DCO, approving also signs off: promote adds Signed-off-by: Colin Walters <walters@verbum.org> to the commits lacking it (the bot's and yours; anyone else's only if you ask), with you as committer.
• Add a /draft line (in the same comment or before) to open it upstream as a draft (/ready undoes that).
• Close to drop it.
• Edit the title and description freely: they become the upstream PR's. Review comments are squashed into the commits they concern, with a reply here.

[cgwalters-bot]

Signed off 2 commit(s) with Signed-off-by: Colin Walters <walters@verbum.org> for bootc-dev/gh-agentic-workflows's DCO check, on cgwalters's approval #2 (review) of 0369550abfbe. Same trees; the head is now 618f0b82dfe6.

[cgwalters-bot]

Opened upstream as bootc-dev#117. Closing this review draft.