Include and pin safe-outputs gh-aw-node image in default container predownload and manifest (#39644)

* Add safeoutputs gh-aw-node predownload

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Start PR finisher triage

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Pin safe-outputs gh-aw-node image

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Merge main and recompile lock files

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Plan CI failure fix

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Fix safe-outputs MCP container config validation

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

* Plan: investigate CI failure and recompile

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

---------

Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>
Co-authored-by: Peli de Halleux <pelikhan@users.noreply.github.com>

Author: Copilot

.github/aw/actions-lock.json

@@ -502,6 +502,11 @@
       "digest": "sha256:64828b42a4482f58fab16509d7f8f495a6d97c972a98a68aff20543531ac0388",
       "pinned_image": "ghcr.io/github/gh-aw-mcpg:v0.3.9@sha256:64828b42a4482f58fab16509d7f8f495a6d97c972a98a68aff20543531ac0388"
     },
+    "ghcr.io/github/gh-aw-node": {
+      "image": "ghcr.io/github/gh-aw-node",
+      "digest": "sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b",
+      "pinned_image": "ghcr.io/github/gh-aw-node@sha256:529d02eb970b1161aa25c593a9c3df57fdfad5a8add328cb3b6eccef66f3183b"
+    },
     "ghcr.io/github/github-mcp-server:v0.32.0": {
       "image": "ghcr.io/github/github-mcp-server:v0.32.0",
       "digest": "sha256:2763823c63bcca718ce53850a1d7fcf2f501ec84028394f1b63ce7e9f4f9be28",