chore(workflows): recompile safe-output fixtures with ado-aw v0.37.0

## Recompile `tests/safe-outputs/` against ado-aw `v0.37.0`

Bumps the `version` field in every `tests/safe-outputs/*.lock.yml` metadata marker from `0.35.3` to `0.37.0`, picking up any compile-output changes shipped in [`ado-aw v0.37.0`](https://github.com/githubnext/ado-aw/releases/tag/v0.37.0).

### Pre-flight integrity check

Before recompiling, `ado-aw check` was run against every existing lock file using the released `v0.37.0` binary:

- **Integrity failures**: `27` of 27 files

```
tests/safe-outputs/add-build-tag.lock.yml
tests/safe-outputs/add-pr-comment.lock.yml
tests/safe-outputs/azure-cli.lock.yml
tests/safe-outputs/comment-on-work-item.lock.yml
tests/safe-outputs/create-branch.lock.yml
tests/safe-outputs/create-git-tag.lock.yml
tests/safe-outputs/create-pull-request.lock.yml
tests/safe-outputs/create-wiki-page.lock.yml
tests/safe-outputs/create-work-item.lock.yml
tests/safe-outputs/janitor.lock.yml
tests/safe-outputs/link-work-items.lock.yml
tests/safe-outputs/missing-data.lock.yml
tests/safe-outputs/missing-tool.lock.yml
tests/safe-outputs/noop-target.lock.yml
tests/safe-outputs/noop.lock.yml
tests/safe-outputs/queue-build.lock.yml
tests/safe-outputs/reply-to-pr-comment.lock.yml
tests/safe-outputs/report-incomplete.lock.yml
tests/safe-outputs/resolve-pr-thread.lock.yml
tests/safe-outputs/smoke-failure-reporter.lock.yml
tests/safe-outputs/submit-pr-review.lock.yml
tests/safe-outputs/update-pr.lock.yml
tests/safe-outputs/update-wiki-page.lock.yml
tests/safe-outputs/update-work-item.lock.yml
tests/safe-outputs/upload-build-attachment.lock.yml
tests/safe-outputs/upload-pipeline-artifact.lock.yml
tests/safe-outputs/upload-workitem-attachment.lock.yml
```

### Files updated

```
tests/safe-outputs/add-build-tag.lock.yml
tests/safe-outputs/add-pr-comment.lock.yml
tests/safe-outputs/azure-cli.lock.yml
tests/safe-outputs/comment-on-work-item.lock.yml
tests/safe-outputs/create-branch.lock.yml
tests/safe-outputs/create-git-tag.lock.yml
tests/safe-outputs/create-pull-request.lock.yml
tests/safe-outputs/create-wiki-page.lock.yml
tests/safe-outputs/create-work-item.lock.yml
tests/safe-outputs/janitor.lock.yml
tests/safe-outputs/link-work-items.lock.yml
tests/safe-outputs/missing-data.lock.yml
tests/safe-outputs/missing-tool.lock.yml
tests/safe-outputs/noop-target.lock.yml
tests/safe-outputs/noop.lock.yml
tests/safe-outputs/queue-build.lock.yml
tests/safe-outputs/reply-to-pr-comment.lock.yml
tests/safe-outputs/report-incomplete.lock.yml
tests/safe-outputs/resolve-pr-thread.lock.yml
tests/safe-outputs/smoke-failure-reporter.lock.yml
tests/safe-outputs/submit-pr-review.lock.yml
tests/safe-outputs/update-pr.lock.yml
tests/safe-outputs/update-wiki-page.lock.yml
tests/safe-outputs/update-work-item.lock.yml
tests/safe-outputs/upload-build-attachment.lock.yml
tests/safe-outputs/upload-pipeline-artifact.lock.yml
tests/safe-outputs/upload-workitem-attachment.lock.yml
```

### How this was produced

- Downloaded `ado-aw-linux-x64` from the `v0.37.0` release and verified its SHA256 against `checksums.txt`.
- Ran `ado-aw check tests/safe-outputs/*.lock.yml` against the released binary to detect drift (27/27 files failed).
- Ran `ado-aw compile --force` on each `tests/safe-outputs/*.md` fixture from the repo root.
- Re-ran `ado-aw check` against every regenerated lock file; all 27 passed.
- The `allowed-files` glob in this workflow restricts the diff to `tests/safe-outputs/**/*.lock.yml`.

### Reviewer checklist

- [ ] Diff is limited to metadata markers (and any genuinely new compile output for `v0.37.0`).
- [ ] No source `.md` fixture changes leaked in.
- [ ] Daily smoke pipelines in the AgentPlayground sandbox stay green after merge.

---
*This PR was opened automatically by the `recompile-safe-output-fixtures` workflow.*

> Generated by [Recompile safe-output fixtures](https://github.com/githubnext/ado-aw/actions/runs/27575351721) · 244.1 AIC · ⌖ 40.9 AIC · ⊞ 37.1K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fado-aw+%22gh-aw-workflow-id%3A+recompile-safe-output-fixtures%22&type=pullrequests)

---

> [!NOTE]
> This was originally intended as a pull request, but the git push operation failed.
>
> **Workflow Run:** [View run details and download bundle artifact](https://github.com/githubnext/ado-aw/actions/runs/27575351721)
>
> The bundle file is available in the `agent` artifact in the workflow run linked above.

To create a pull request with the changes:

```sh
# Download the artifact from the workflow run
gh run download 27575351721 -n agent -D /tmp/agent-27575351721

# Fetch the bundle into a temporary ref, then update the local branch
git fetch /tmp/agent-27575351721/aw-recompile-safe-outputs-v0.37.0.bundle refs/heads/recompile-safe-outputs-v0.37.0:refs/bundles/create-pr-recompile-safe-outputs-v0-37-0-376aaf7f1597ffa9-ee2394ee
git update-ref refs/heads/recompile-safe-outputs-v0.37.0-376aaf7f1597ffa9 refs/bundles/create-pr-recompile-safe-outputs-v0-37-0-376aaf7f1597ffa9-ee2394ee
git checkout recompile-safe-outputs-v0.37.0-376aaf7f1597ffa9
# Ensure the working tree matches the updated branch
git reset --hard
# Remove the temporary bundle ref
git update-ref -d refs/bundles/create-pr-recompile-safe-outputs-v0-37-0-376aaf7f1597ffa9-ee2394ee

# Push the branch to origin
git push origin recompile-safe-outputs-v0.37.0-376aaf7f1597ffa9

# Create the pull request
gh pr create --title 'chore(workflows): recompile safe-output fixtures with ado-aw v0.37.0' --base main --head recompile-safe-outputs-v0.37.0-376aaf7f1597ffa9 --repo githubnext/ado-aw
```