Fix yamllint violations in generated lock files

- trigger_parser.go: use yaml.MarshalWithOptions with IndentSequence(true)
  for `on:` section when reaction/status-comment/stop-after triggers present
- tools.go: same fix for slash_command and label_command event merging
- schedule_preprocessing.go: move Friendly format comment inline on cron
  line instead of a separate next line (fixes comments-indentation warnings)
- compiler_main_job.go: normalize RenderToYAML() output through
  filterJobLevelPermissions in needsContentsRead block (fixes expected 6
  but found 10 indentation errors for workflows missing contents:read)
- Update test assertions to match new IndentSequence(true) output
- Update wasm golden file for smoke-copilot
- Recompile all 260 lock files

Before: 410 yamllint violations (62 errors, 348 warnings)
After:  227 yamllint violations (16 errors, 211 warnings)
Remaining 16 errors are pre-existing in embedded jq/shell scripts

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Author: Copilot