[instructions] Sync instruction files with release v0.82.14

.github/aw/create-agentic-workflow-trigger-details.md

@@ -10,14 +10,7 @@ For recurring reports, audits, and stakeholder digests, set these create-specifi
 - use `add-comment` only when updating an existing issue or pull request instead of creating a new report destination
 - add `workflow_dispatch` when manual reruns, backfills, or preview runs should be possible
 
-Recurring-report lifecycle checklist (compact):
-
-- [ ] enable `close-older-issues: true` for issue-based recurring reports unless the requester explicitly wants parallel open threads
-- [ ] define one explicit report window (for example `last 7 full days ending at run start (UTC)` or `since previous successful run`)
-- [ ] define grouping dimensions that match audience decisions (for example team, area, owner, severity, status)
-- [ ] derive one stable dedup key per scope and window (for example `stakeholder-digest:<scope>:<window-id>`) and search for it before creating a new issue
-
-Follow [triggers.md](triggers.md) for the report window, grouping dimensions, deduplication key, and empty-window `noop` rule, and [workflow-patterns.md](workflow-patterns.md) for the digest/incident skeletons. When the digest depends on missing or inconsistent metadata, group by the next-best available dimension, use an explicit "Unclassified" bucket, and never invent classifications — call `noop` only when the window itself has zero events.
+For the recurring-report window, grouping dimensions, deduplication key, `close-older-issues` lifecycle, and empty-window/missing-metadata `noop` rules, follow the canonical defaults in [report.md](report.md). Use [workflow-patterns.md](workflow-patterns.md) for the digest/incident skeletons.
 
 ## Persona-oriented scenario map
 

.github/aw/syntax-agentic.md

@@ -33,7 +33,7 @@ description: Agentic workflow specific frontmatter fields for GitHub Agentic Wor
     allowed: ["gpt-5", "claude-*"]
     blocked: ["*-preview"]
   ```
-- **`max-daily-ai-credits:`** - Per-user 24-hour AI Credits (AIC) guardrail: activation blocks execution once the triggering user's aggregated AI Credits for this workflow over the last 24h exceed the threshold (integer or `K`/`M` short-form string, or `-1`). Enabled by default with a system default threshold; set `-1` to disable or an explicit value to override. See [token-optimization.md](token-optimization.md).
+- **`max-daily-ai-credits:`** - Per-user 24-hour AI Credits (AIC) guardrail: activation blocks execution once the triggering user's aggregated AI Credits for this workflow over the last 24h exceed the threshold (integer or `K`/`M` short-form string, or `-1`). Disabled by default; omit the field to leave the guardrail off, or set an explicit threshold to enable it. See [token-optimization.md](token-optimization.md).
 - **`user-rate-limit:`** - Rate limiting configuration to prevent users from triggering the workflow too frequently (object)
   - **`max-runs-per-window:`** - Maximum runs allowed per user per time window (required, integer 1-10)
   - **`window:`** - Time window in minutes (integer 1-180, default: 60)

.github/aw/syntax-core.md

@@ -162,3 +162,5 @@ The YAML frontmatter supports these fields:
 
   - Never commit plaintext secrets
   - For reusable workflows, use `jobs.<job_id>.secrets` instead
+- **`excluded-env:`** - Optional list of environment variable names to unconditionally exclude from the AWF agent container via `--exclude-env` (array of strings). Use when an env var carries a credential the compiler cannot auto-detect (for example a `workflow_dispatch` input holding a token). Names are deduplicated and merged with those auto-detected from `secrets.*` and `needs.*.outputs.*` references.
+  - Example: `excluded-env: [MY_DISPATCH_TOKEN, GH_TOKEN]`