[docs] Update documentation for features from 2026-07-08

[github-actions]

Summary

Documentation update clarifying that gh-aw validates token type at runtime and intentionally rejects OAuth user tokens (gho_...) for COPILOT_GITHUB_TOKEN and GH_AW_GITHUB_TOKEN.

Changes

docs/src/content/docs/reference/auth.mdx (+4 lines)

• Added paragraph under COPILOT_GITHUB_TOKEN section: documents runtime token-type validation during activation. If either COPILOT_GITHUB_TOKEN or GH_AW_GITHUB_TOKEN starts with the OAuth token prefix (gho_), the workflow fails early with guidance to replace it with a fine-grained PAT. Explains that OAuth user tokens are intentionally rejected because they are broad user-session credentials and cannot be scoped appropriately for automation.
• Added paragraph under GH_AW_GITHUB_TOKEN section: reinforces that this secret must be a PAT rather than an OAuth user token. Documents that gh-aw now fails early during activation when either secret uses a gho_... token, with remediation pointing to creating a fine-grained PAT.

Behaviour Documented

Secret	Rejected prefix	Failure mode
COPILOT_GITHUB_TOKEN	gho_	Early activation failure with remediation guidance
GH_AW_GITHUB_TOKEN	gho_	Early activation failure with remediation guidance

Commits

• a3e537b docs: clarify PAT-only token validation

Generated by PR Description Updater for #44275 · 33.1 AIC · ⌖ 6.19 AIC · ⊞ 4.7K · ◷

[github-actions]

🎉 This pull request is included in a new release.

Release: v0.82.6