[aw-maintenance:failures-investigator] All agentic workflows blocked at activation: gh-aw v0.82.13 is on the blocked versions list

**Problem**: All agentic workflows in `githubnext/gh-aw-workshop` are failing at activation, before the agent job runs. The "Check compile-agentic version" step in every activation job reports:

```
##[error]Blocked compile-agentic version: v0.82.13 is in the blocked versions list. Update gh-aw to the latest version and recompile your workflow.
```

**Affected runs** (5 sampled, all identical signature; 41 total failed runs in the 24h window across all 22 agentic workflows):
- https://github.com/githubnext/gh-aw-workshop/actions/runs/33815258690 (Workshop Builder)
- https://github.com/githubnext/gh-aw-workshop/actions/runs/33810480125 (Workshop Builder)
- https://github.com/githubnext/gh-aw-workshop/actions/runs/33807856135 (Workflow Skills Editor)
- https://github.com/githubnext/gh-aw-workshop/actions/runs/33807178518 (Workshop Link Checker)
- https://github.com/githubnext/gh-aw-workshop/actions/runs/33805019420 (Workshop Builder)

**Probable root cause**: The compiled workflow lock files pin `GH_AW_COMPILED_VERSION: v0.82.13`. The activation job's github-script step (`check_version_updates.cjs`) fetches an allow/block list from `https://raw.githubusercontent.com/github/gh-aw-actions/main/.github/aw/compat.json` and fails the run because `v0.82.13` is on that blocked-versions list. Since this check runs in every workflow's activation job prior to agent execution, it blocks every agentic workflow run in the repository regardless of workflow content.

**Proposed remediation** (in `githubnext/gh-aw-workshop`):
1. Update the `gh-aw` CLI/extension to a version newer than `v0.82.13` that is not on the blocked list.
2. Recompile every `.github/workflows/*.md` source with the updated `gh-aw` (`gh aw compile`) so all `.lock.yml` files pick up the new `GH_AW_COMPILED_VERSION`.
3. Commit and push the regenerated lock files.

**Success criteria**:
- A subsequent run of any agentic workflow (e.g. `Workshop Builder`) completes the activation job's "Check compile-agentic version" step without the `##[error]Blocked compile-agentic version` message.
- The workflow proceeds past activation into the agent job.

See the failure report issue (`#948`) for full evidence and bucket analysis.

### Control Plane
- Correlation ID: 33818396937-30
- Central repository: githubnext/gh-aw-cao
- Control plane run URL: https://github.com/githubnext/gh-aw-cao/actions/runs/33818396937

> Generated by [:rotating_light: AW Maintenance / Failures](https://github.com/githubnext/gh-aw-cao/actions/runs/33818777613) · copilot · auto · 35 AIC · ⌖ 10.5 AIC · ⊞ 14.9K · [◷](https://github.com/search?q=repo%3Agithubnext%2Fgh-aw-cao+is%3Aissue+%22gh-aw-workflow-call-id%3A+githubnext%2Fgh-aw-cao%2Faw-failures-investigator%22&type=issues)
> - [x] expires on Sep 17, 2026, 11:49 PM UTC

Work in githubnext/gh-aw-workshop, starting with the .github/workflows/*.md sources, their generated .lock.yml files, and the activation check that uses check_version_updates.cjs. Inspect the pinned GH_AW_COMPILED_VERSION values and run gh aw compile after reviewing the gh-aw version update process. Done means regenerated lock files use an allowed version and a subsequent agentic workflow passes “Check compile-agentic version” and reaches the agent job.

Written by the indexing model from the issue text.