diff --git a/.github/workflows/smoke-claude.lock.yml b/.github/workflows/smoke-claude.lock.yml
index 221326b9210..347a631f453 100644
--- a/.github/workflows/smoke-claude.lock.yml
+++ b/.github/workflows/smoke-claude.lock.yml
@@ -134,6 +134,10 @@ jobs:
         uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           persist-credentials: false
+      - name: Setup Go
+        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
+        with:
+          go-version: '1.25'
       - name: Create gh-aw temp directory
         run: bash /opt/gh-aw/actions/create_gh_aw_tmp_dir.sh
       # Cache memory file share configuration from frontmatter processed below
diff --git a/.github/workflows/smoke-claude.md b/.github/workflows/smoke-claude.md
index 1068c489459..5b5f6cd2e02 100644
--- a/.github/workflows/smoke-claude.md
+++ b/.github/workflows/smoke-claude.md
@@ -42,6 +42,9 @@ tools:
   serena:
     languages:
       go: {}
+runtimes:
+  go:
+    version: "1.25"
 safe-outputs:
     add-comment:
       hide-older-comments: true
diff --git a/.github/workflows/smoke-codex.lock.yml b/.github/workflows/smoke-codex.lock.yml
index 00334be2a9c..0b5b6fd8613 100644
--- a/.github/workflows/smoke-codex.lock.yml
+++ b/.github/workflows/smoke-codex.lock.yml
@@ -133,6 +133,10 @@ jobs:
         uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           persist-credentials: false
+      - name: Setup Go
+        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
+        with:
+          go-version: '1.25'
       - name: Create gh-aw temp directory
         run: bash /opt/gh-aw/actions/create_gh_aw_tmp_dir.sh
       # Cache memory file share configuration from frontmatter processed below
diff --git a/.github/workflows/smoke-codex.md b/.github/workflows/smoke-codex.md
index 071de4e7c2f..fcc8cd90045 100644
--- a/.github/workflows/smoke-codex.md
+++ b/.github/workflows/smoke-codex.md
@@ -34,6 +34,9 @@ tools:
   serena:
     languages:
       go: {}
+runtimes:
+  go:
+    version: "1.25"
 sandbox:
   mcp:
     container: "ghcr.io/githubnext/gh-aw-mcpg"
diff --git a/.github/workflows/smoke-copilot.lock.yml b/.github/workflows/smoke-copilot.lock.yml
index 40b0440908a..9f0ac24dc8f 100644
--- a/.github/workflows/smoke-copilot.lock.yml
+++ b/.github/workflows/smoke-copilot.lock.yml
@@ -129,6 +129,10 @@ jobs:
         uses: actions/checkout@93cb6efe18208431cddfb8368fd83d5badbf9bfd # v5.0.1
         with:
           persist-credentials: false
+      - name: Setup Go
+        uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6.1.0
+        with:
+          go-version: '1.25'
       - name: Create gh-aw temp directory
         run: bash /opt/gh-aw/actions/create_gh_aw_tmp_dir.sh
       # Cache memory file share configuration from frontmatter processed below
diff --git a/.github/workflows/smoke-copilot.md b/.github/workflows/smoke-copilot.md
index 69e46e115fd..2b9f566d979 100644
--- a/.github/workflows/smoke-copilot.md
+++ b/.github/workflows/smoke-copilot.md
@@ -34,6 +34,9 @@ tools:
     languages:
       go: {}
   web-fetch:
+runtimes:
+  go:
+    version: "1.25"
 sandbox:
   mcp:
     container: "ghcr.io/githubnext/gh-aw-mcpg"
diff --git a/pkg/cli/.github/aw/imports/.gitattributes b/pkg/cli/.github/aw/imports/.gitattributes
deleted file mode 100644
index f0516fad90e..00000000000
--- a/pkg/cli/.github/aw/imports/.gitattributes
+++ /dev/null
@@ -1,5 +0,0 @@
-# Mark all cached import files as generated
-* linguist-generated=true
-
-# Use 'ours' merge strategy to keep local cached versions
-* merge=ours
diff --git a/pkg/cli/templates/generate-agentic-campaign.md b/pkg/cli/templates/generate-agentic-campaign.md
index a911ebaa538..9dc4d5af6ca 100644
--- a/pkg/cli/templates/generate-agentic-campaign.md
+++ b/pkg/cli/templates/generate-agentic-campaign.md
@@ -91,9 +91,9 @@ allowed-safe-outputs: [create-issue, add-comment]
 safe-outputs:
   create-project:
     max: 1
-    github-token: "<GH_AW_PROJECT_GITHUB_TOKEN>"
+    github-token: "<GH_AW_PROJECT_GITHUB_TOKEN>"  # Provide via workflow secret/env; avoid secrets expressions in runtime-import files
     target-owner: "${{ github.repository_owner }}"
-    views:
+    views:  # Views are created automatically when project is created
       - name: "Campaign Roadmap"
         layout: "roadmap"
         filter: "is:issue is:pr"