feat: import 👾 Issue Monster workflow

## Source

[Issue Monster](https://github.com/github/gh-aw/blob/main/.github/workflows/issue-monster.md) from `github/gh-aw`

## What it does

Issue Monster is the Cookie Monster of issues 🍪 — it runs every 30 minutes, scans the issue tracker for open issues labeled `cookie`, scores and prioritizes them, and assigns up to three per run to the Copilot coding agent for automated resolution. It includes:

- **Rate-limit protection**: Checks for rate-limited PRs in the last hour before assigning more work
- **Smart filtering**: Skips issues that are already assigned, have open Copilot PRs, are parent issues with sub-issues, or carry exclusion labels
- **Priority scoring**: Community issues > good-first-issue > security > bug > documentation > enhancement > ...
- **Topic separation**: Enforces that the three selected issues are completely independent in scope
- **Sibling awareness**: For sub-issues of a common parent, processes them one at a time (oldest first)
- **Integrity policy handling**: Skips integrity-blocked issues gracefully without failing the run

## Adaptations

The following project-specific content from `github/gh-aw` was removed or generalized:

- Removed `skip-if-check-failing` with project-specific check names (`lint-go`, `lint-js`, `build`, `test`) — users can add their own CI checks
- Removed internal shared imports (`shared/github-guard-policy.md`, `shared/activation-app.md`, `shared/otlp.md`) — these are internal to the gh-aw repo and not available in agentics
- Removed `engine.id: pi` and `engine.model: copilot/gpt-5.4` — uses workflow defaults

All core behavior, the pre-activation GitHub Actions job, the agent prompt, scoring system, and safe-outputs configuration are preserved.

## Custom agents

No custom agent files were referenced in this workflow.

## Note on compiled lock file

The `gh aw compile --dir workflows` step could not be run in this environment because downloading the `gh-aw` binary was blocked by the network firewall (`release-assets.githubusercontent.com` is not in the allowed domains list). The lock file was not included. Users who install this workflow via `gh aw add-wizard` will have it compiled locally.

## Category

Added to **Issue Farming Workflows** section in README.md (under Meta-Workflows).

---

> [!WARNING]
> **Protected Files — Push Permission Denied**
>
> This was originally intended as a pull request, but the patch modifies protected files. A human must create the pull request manually.
>
>
> Protected files
>
> - `README.md`
>
> The push was rejected because GitHub Actions does not have `workflows` permission to push these changes, and is never allowed to make such changes, or other authorization being used does not have this permission.
>
>

Create the pull request manually

```sh
# Download the patch from the workflow run
gh run download 28219801895 -n agent -D /tmp/agent-28219801895

# Create a new branch
git checkout -b import/issue-monster-4bb3d20aab0a58b1 main

# Apply the patch (--3way handles cross-repo patches)
git am --3way /tmp/agent-28219801895/aw-import-issue-monster.patch

# Push the branch and create the pull request
git push origin import/issue-monster-4bb3d20aab0a58b1
gh pr create --title 'feat: import 👾 Issue Monster workflow' --base main --head import/issue-monster-4bb3d20aab0a58b1 --repo githubnext/agentics
```

> [!WARNING]
>
> Firewall blocked 1 domain
>
> The following domain was blocked by the firewall during workflow execution:
>
> - `releaseassets.githubusercontent.com`
>> To allow these domains, add them to the `network.allowed` list in your workflow frontmatter:
>
> ```yaml
> network:
> allowed:
> - defaults
> - "releaseassets.githubusercontent.com"
> ```
>
> See [Network Configuration](https://github.github.com/gh-aw/reference/network/) for more information.
>
>

> Generated by [Import Workflow from Prompt Repository](https://github.com/githubnext/agentics/actions/runs/28219801895) · 1.4K AIC · ⌖ 57.8 AIC · ⊞ 33.2K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fagentics+%22gh-aw-workflow-id%3A+import-workflow%22&type=pullrequests)