fix: replace expired AWI_MAINTENANCE_TOKEN with GH_AW_GITHUB_TOKEN in pr-sous-chef add_comment handler

[Copilot]

add_comment safe-output calls in PR Sous Chef were failing 100% of the time with 401 Bad credentials because the handler was pinned to AWI_MAINTENANCE_TOKEN — a dedicated secret that is expired/revoked — while every other handler in the same workflow uses GH_AW_GITHUB_TOKEN/GITHUB_TOKEN and succeeds.

Changes

• pr-sous-chef.md — replace AWI_MAINTENANCE_TOKEN with GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN on the add-comment safe-output github-token field, matching the pattern used by all other handlers

 safe-outputs:
   add-comment:
     max: 4
     target: "*"
-    github-token: ${{ secrets.AWI_MAINTENANCE_TOKEN }}
+    github-token: ${{ secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}

• pr-sous-chef.lock.yml — recompiled; AWI_MAINTENANCE_TOKEN is fully absent from the lock file and its secrets manifest

• Fixes [aw-failures] [aw] PR Sous Chef: add_comment failing with 401 Bad credentials (AWI_MAINTENANCE_TOKEN) #48899