Revert org-billed Copilot CLI opt-in and restore max-ai-credits to -1

[jonathanpeppers]

What

Two reverts to the java-interop-reviewer workflow:

1. Revert the org-billed Copilot CLI opt-in from Use GITHUB_TOKEN for Copilot CLI inference in agentic workflows #1469. Removes copilot-requests: write from .github/workflows/java-interop-reviewer.md, which switches Copilot CLI inference back from the built-in GITHUB_TOKEN to the stored PAT (secrets.COPILOT_GITHUB_TOKEN).
2. Revert max-ai-credits from 100M back to -1 (truly unlimited / disabled). Fix PR reviewer auth: cap max-ai-credits at 100M instead of -1 #1472 capped it at 100M based on a theory that -1 was the cause of the auth 403, but the 403 reproduced under 100M too — the cap was not the issue and -1 is the preferred value.

The lock file (.github/workflows/java-interop-reviewer.lock.yml) is regenerated via gh aw compile java-interop-reviewer to reflect both changes.

The gh-aw CLI v0.79.8 bump and the agentics-maintenance.yml updates from #1469 are intentionally left in place — only the org-billed-CLI opt-in is being reverted.

Why

The "GITHUB_TOKEN-billed-to-org" feature (changelog) requires the "Allow use of Copilot CLI billed to the organization" Copilot policy to be enabled at the org level. The dotnet org has not enabled that policy yet, so after #1469 merged the workflow started failing with HTTP 403 from api.githubcopilot.com/models:

• Failing run: https://github.com/dotnet/java-interop/actions/runs/27628125187/job/81695629467

Re-adding the COPILOT_GITHUB_TOKEN secret to the copilot-pr-reviewer environment is faster than getting the org policy enabled, so we revert to the PAT-based flow for now.

Verification

Regenerated java-interop-reviewer.lock.yml confirms the expected changes:

• COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }} (was ${{ github.token }}) in both the agent and threat-detection jobs.
• copilot-requests: write removed from both jobs' permissions: blocks.
• S2STOKENS: true env (the org-billed-CLI signal) removed from both jobs.
• SECRET_COPILOT_GITHUB_TOKEN re-added to the redaction step.
• GH_AW_MAX_AI_CREDITS: "-1" (was "100000000"); apiProxy.maxAiCredits and enableTokenSteering removed from the firewall config.

Follow-up (manual)

After this merges, re-add the COPILOT_GITHUB_TOKEN secret to the copilot-pr-reviewer environment so the PAT-based flow works again. The user will do that manually — no secret values are touched in this PR.

[Copilot]

Pull request overview

Reverts the java-interop-reviewer agentic workflow’s opt-in to org-billed Copilot CLI inference by removing the copilot-requests: write permission and regenerating the compiled lock workflow to use the PAT-backed COPILOT_GITHUB_TOKEN secret again.

Changes:

• Removed copilot-requests: write from the workflow permissions.
• Regenerated java-interop-reviewer.lock.yml to restore COPILOT_GITHUB_TOKEN: ${{ secrets.COPILOT_GITHUB_TOKEN }}, remove S2STOKENS: true, and re-add secret redaction wiring.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File	Description
.github/workflows/java-interop-reviewer.md	Removes copilot-requests: write from the agentic workflow permissions.
.github/workflows/java-interop-reviewer.lock.yml	Regenerated compiled workflow to switch Copilot inference back to secrets.COPILOT_GITHUB_TOKEN and remove org-billed signals/permissions.