Group review-sdk failure issues instead of duplicating

[Copilot]

The Review SDK PR agentic workflow repeatedly failed with Engine Failure: The copilot engine terminated before producing output, each occurrence filing a new duplicate [aw] Review SDK PR failed issue.

Root cause

• Job logs show the Copilot CLI resolves fine on the runner host, but the sandboxed awf-agent container (pinned gh-aw-firewall:0.27.44 image) fails to spawn /usr/local/bin/copilot inside itself: spawn /usr/local/bin/copilot ENOENT.
• Since the process exits with no output, gh-aw's harness intentionally skips retrying (nothing to resume), surfacing as an immediate "Engine Failure".
• This is a transient issue in the upstream gh-aw/gh-aw-firewall sandbox provisioning pipeline, not a bug in this repo's workflow definition — not something that can be reliably fixed by editing review-sdk.md.

Change

• Enabled safe-outputs.group-reports: true in .github/workflows/review-sdk.md, the documented gh-aw mitigation for this exact scenario.
• Future failures are now filed as sub-issues under a single parent [aw] Failed runs issue instead of spawning new top-level duplicates, while keeping failures visible.
• Recompiled review-sdk.lock.yml via gh aw compile review-sdk; the diff is limited to GH_AW_GROUP_REPORTS flipping from "false" to "true" plus the expected frontmatter-hash update.

safe-outputs:
  group-reports: true
  create-pull-request-review-comment:
    ...

If the underlying ENOENT failure keeps recurring, it should be reported upstream to github/gh-aw, since the actual fix belongs in their sandbox/container provisioning.

• Fixes [aw] Review SDK PR failed #5131

[azure-pipelines]

Azure Pipelines:
4 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[azure-pipelines]

Azure Pipelines:
Successfully started running 1 pipeline(s).
3 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[Copilot]

Warning

• Copilot's review of this pull request may be incomplete because some of the changed files are excluded by your Copilot content exclusion settings. See Excluding content from Copilot for details.

Pull request overview

Groups recurring review-sdk failure reports under one parent issue to reduce duplicate top-level issues.

Changes:

• Enables safe-outputs.group-reports.
• Regenerates the compiled workflow artifact.

Show a summary per file

File	Description
.github/workflows/review-sdk.md	Enables grouped failure reporting.
.github/workflows/review-sdk.lock.yml	Regenerated artifact; content excluded from review.

Review details

💡 Add a code-review agent skill for context-aware, tailored reviews. Learn more in the docs.

Files excluded by content exclusion policy (1)

• .github/workflows/review-sdk.lock.yml

• Files reviewed: 1/2 changed files
• Comments generated: 0
• Review effort level: Balanced