Allow workshop author safe outputs to include top-level workshop markdown files

[Copilot]

The workshop author workflow failed when its safe-output PR tried to include workshop/00-welcome.md and workshop/README.md. The allowlist only matched nested markdown paths, so valid workshop files at the top level of workshop/ were rejected.

• Safe output allowlist

  • Expanded create-pull-request allowed-files to include both top-level and nested workshop markdown:
    • workshop/*.md
    • workshop/**/*.md

• Lockfile parity

  • Updated the generated safe-output config embedded in workshop-author.lock.yml so runtime behavior matches the authored workflow config.

• Effect

  • The workflow can now open PRs for the workshop step file and workshop/README.md in the same safe-output patch, which is the expected authoring path.

safe-outputs:
  create-pull-request:
    allowed-files:
      - "workshop/*.md"
      - "workshop/**/*.md"