Duplicate Surfacing workflow fails on every run with "Blocked compile-agentic version: v0.83.4" #706

Brief description of your issue

The Duplicate Surfacing workflow (.github/workflows/duplicate-surfacing.lock.yml) has failed on every run since #701. All of these runs fail in the activation job:

Blocked compile-agentic version: v0.83.4 is in the blocked versions list. Update gh-aw to the latest version and recompile your workflow.

The job summary adds that compile-agentic version v0.83.4 has been revoked, typically due to a security issue.

Steps to reproduce

1. Open a new issue in this repository (e.g. Remove --prtitle from Usage commands #705).
2. The Duplicate Surfacing workflow starts on the issues event.
3. The run fails in activation within about a minute.

Expected behavior

The workflow runs to completion and posts its output, as it did for the runs triggered by #689, #696 and #697.

Actual behavior

pre_activation completes, activation fails, and agent, detection, safe_outputs and conclusion are skipped. No output is produced.

The failing runs were triggered by #700, #701, #702 and #705.

The lock file was added in #687 and last modified in #690. It still references github/gh-aw-actions/setup@e89c65e17eb281bbd5ff2ff9e9199a03e96654c7 # v0.83.4 and records GH_AW_COMPILED_VERSION: "v0.83.4"; .github/aw/actions-lock.json pins the same version.

The same pilot workflow in microsoft/winget-cli (added in microsoft/winget-cli#6400) fails the same way; its latest run (triggered by microsoft/winget-cli#6535) reports the identical activation error: https://github.com/microsoft/winget-cli/actions/runs/35486415784. The winget-cli duplicate-surfacing.lock.yml still records compile version v0.83.4; the Dependabot updates of github/gh-aw-actions/setup in microsoft/winget-cli#6491 and microsoft/winget-cli#6501 (v0.83.4 to v0.87.5) did not clear the block.

Environment

GitHub Actions. Last failed run: https://github.com/microsoft/winget-create/actions/runs/35495581960