awf-release-integrator

# AWF Release Integrator Use this skill when updating `github/gh-aw` to a newer `github/gh-aw-firewall` release. ## Goal Land the version bump cleanly, rebuild the generated artifacts, and review upstream release/spec changes for any follow-up work that should accompany the bump. ## Required sources Consult these sources before editing anything: 1. The latest `github/gh-aw-firewall` release metadata and body. 2. The current gh-aw version pins in `pkg/constants/version_constants.go`. 3. The canonical AWF config sources spec in `specs/awf-config-sources-spec.md`. 4. The embedded AWF schema in `pkg/workflow/schemas/awf-config.schema.json`. 5. AWF config integration code in: - `pkg/workflow/awf_config.go` - `pkg/workflow/awf_config_build.go` - `pkg/workflow/awf_config_schema.go` - `pkg/workflow/awf_config_policy.go` - `pkg/workflow/awf_helpers.go` - related AWF tests under `pkg/workflow/` For upstream spec review, compare these files from the target `github/gh-aw-firewall` release or tag: - `docs/awf-config-spec.md` - `docs/awf-config.schema.json` - `src/awf-config-schema.json` - any release assets such as `awf-config.schema.json` ## Update procedure 1. Read `pkg/constants/version_constants.go` and record: - `DefaultFirewallVersion` - every `AWF*MinVersion` constant 2. Look up the latest `github/gh-aw-firewall` release. 3. If the latest release tag matches `DefaultFirewallVersion`, report that no version bump is needed and only continue with spec...