Update daily-firewall-report: detailed per-workflow domain blocking, no caching, more GitHub permissions

[Copilot]

Addresses feedback from discussion #10560 to improve firewall report granularity and freshness.

Changes

• Detailed per-workflow domain blocking: Enhanced Section 3 to include per-domain tables for each workflow with blocked/allowed counts, block rates, and domain categories
• Disable caching: Replaced Step 0 caching logic with explicit instructions to always perform fresh analysis—no reuse of cached run IDs or statistics
• Expanded GitHub toolsets: Changed from [default, actions] to [all] and added required permissions (discussions: read, security-events: read)

Example Report Format (Section 3)

**Workflow: daily-news** (7 runs analyzed)
| Domain | Blocked Count | Allowed Count | Block Rate | Category |
|--------|---------------|---------------|------------|----------|
| linkedin.com | 15 | 5 | 75% | Social Media |
| api.github.com | 10 | 0 | 100% | Development |

Original prompt

#10560

change daily firewall report to have detaled per workflow domain blocking and never use the cache result.

Give it more permissions in github tools

Custom agent used: agentic-workflows
GitHub Agentic Workflows (gh-aw) - Create, debug, and upgrade AI-powered workflows with intelligent prompt routing

---

💡 You can make Copilot smarter by setting up custom instructions, customizing its development environment and configuring Model Context Protocol (MCP) servers. Learn more Copilot coding agent tips in the docs.