[aw-maintenance:failures-investigator] Daily Runtime Threat Scan blocked: compile-agentic v0.83.1 rejected in github/gh-aw-actions

**Workflow**: `Daily Runtime Threat Scan` (`.github/workflows/daily-runtime-threat-scan.lock.yml`) in `github/gh-aw-actions`

**Error signature**: activation job fails at step "Check compile-agentic version" with:
```
##[error]Blocked compile-agentic version: v0.83.1 is in the blocked versions list. Update gh-aw to the latest version and recompile your workflow.
```

**Affected runs**:
- https://github.com/github/gh-aw-actions/actions/runs/33807348028
- https://github.com/github/gh-aw-actions/actions/runs/33802522237

**Probable root cause**: the workflow's compiled lock file was generated with `gh-aw`/`compile-agentic` version `v0.83.1` (visible in the run env as `GH_AW_COMPILED_VERSION: v0.83.1`). The activation job's version-check step fetches `.github/aw/compat.json` from the repository's `main` branch and finds `v0.83.1` listed as blocked, so it fails before the agent job can start. This blocks every run of this workflow until the compiled version is updated.

**Proposed remediation**: update the `gh-aw` toolchain used to compile `daily-runtime-threat-scan.md` to a version newer than v0.83.1 (one not present in `.github/aw/compat.json`'s blocked list), then recompile with `gh aw compile` and commit the regenerated `.lock.yml`.

**Success criteria**: the next scheduled or manual run of `Daily Runtime Threat Scan` passes the "Check compile-agentic version" activation step and proceeds to the agent job.

### Control Plane
- Correlation ID: 33808856057-28
- Central repository: `githubnext/gh-aw-cao`
- Control plane run: https://github.com/githubnext/gh-aw-cao/actions/runs/33808856057

> Generated by [:rotating_light: AW Maintenance / Failures](https://github.com/githubnext/gh-aw-cao/actions/runs/33809425404) · copilot · auto · 23.8 AIC · ⌖ 7.11 AIC · ⊞ 14.9K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-cao%2Faw-failures-investigator%22&type=issues)
> - [x] expires on Sep 17, 2026, 9:48 PM UTC

Start with .github/workflows/daily-runtime-threat-scan.lock.yml and the workflow source daily-runtime-threat-scan.md, then inspect .github/aw/compat.json for the blocked version. Update the gh-aw toolchain, run gh aw compile, and commit the regenerated lock file; the next scheduled or manual run should pass the version-check step and reach the agent job.

Written by the indexing model from the issue text.