docs: address PR #8510 review comments — fix MCP list, Vaadin 8 refs, workflows table, autobuild note (#8512)

* docs: rewrite github-agentic-workflows and github-actions-workflows skills with latest features

Agent-Logs-Url: https://github.com/Hack23/cia/sessions/6e645176-7e5b-4347-8732-14081bf4da5c

Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

* docs: compact all 6 agents, update agents README, update skills README descriptions

Agent-Logs-Url: https://github.com/Hack23/cia/sessions/6e645176-7e5b-4347-8732-14081bf4da5c

Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

* fix: address PR review comments - test patterns, SHA pinning, Vaadin 8 APIs, copilot-instructions ref

Agent-Logs-Url: https://github.com/Hack23/cia/sessions/81cd5d37-3b2d-44a2-a7fe-f94024e561d6

Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

* fix: address second round of review comments - branch names, workflow inventory, SHA pinning, Vaadin 8, MCP tools

Agent-Logs-Url: https://github.com/Hack23/cia/sessions/e9858d2a-bbcc-4ee4-970b-a62c4993956b

Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

* fix: address third round of review comments - CodeQL autobuild, OIDC permissions, Vaadin 8 bundle guidance, remove stale metrics

Agent-Logs-Url: https://github.com/Hack23/cia/sessions/554fd806-b4db-49be-9739-fb3150649b16

Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

* docs: address PR #8510 review comments — fix MCP server list, Vaadin 8 Text→Label, add missing workflows, note autobuild

Agent-Logs-Url: https://github.com/Hack23/cia/sessions/805fa5df-3bf6-4d23-8838-fd23ca176e27

Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>

---------

Signed-off-by: James Pether Sörling <pethers@users.noreply.github.com>
Co-authored-by: copilot-swe-agent[bot] <198982749+Copilot@users.noreply.github.com>
Co-authored-by: pethers <1726836+pethers@users.noreply.github.com>
Co-authored-by: James Pether Sörling <pethers@users.noreply.github.com>

Author: Copilot

.github/copilot-instructions.md

@@ -5,7 +5,7 @@
 **ALWAYS read at the start of EVERY task:**
 1. **[README.md](../README.md)** — Project overview, features, docs
 2. **[copilot-setup-steps.yml](workflows/copilot-setup-steps.yml)** — Build environment (Java 26, Maven 3.9.14, PostgreSQL 18)
-3. **[copilot-mcp-config.json](copilot-mcp-config.json)** — MCP servers (GitHub, filesystem, memory, playwright, sequential-thinking)
+3. **[copilot-mcp-config.json](copilot-mcp-config.json)** — MCP servers (GitHub, filesystem, memory, sequential-thinking, playwright)
 4. **[skills/](skills/)** — 79 skills for security, testing, architecture, compliance
 5. **[agents/](agents/)** — 6 specialized agents (task, stack, UI, intelligence, business, marketing)
 

.github/skills/github-actions-workflows/SKILL.md

@@ -80,11 +80,10 @@ jobs:
         with:
           languages: java
 
-      # Note: This template uses Autobuild for portability.
-      # In this repository, `.github/workflows/codeql-analysis.yml`
-      # uses a custom Maven build and keeps Autobuild disabled.
       - name: Autobuild
         uses: github/codeql-action/autobuild@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
+        # Note: The actual codeql-analysis.yml uses a custom Maven build instead of autobuild.
+        # Replace this step with a manual build if autobuild fails for your project.
 
       - name: CodeQL Analysis
         uses: github/codeql-action/analyze@ff0a06e83cb2de871e5a09832bc6a81e7276941f # v3.28.18
@@ -152,9 +151,7 @@ env:
 
 ## CIA-Specific Workflows
 
-### Existing Workflows (Curated Subset)
-This is a curated subset of core workflows, not a full inventory.
-
+### Existing Workflows
 | Workflow | Purpose | Trigger |
 |----------|---------|---------|
 | `codeql-analysis.yml` | Security vulnerability scanning | Push/PR to master + scheduled |
@@ -165,11 +162,11 @@ This is a curated subset of core workflows, not a full inventory.
 | `javadoc-generation.yml` | JavaDoc generation | Push/scheduled |
 | `site-generation.yml` | Maven site generation | Push/scheduled |
 | `zap-scan.yml` | OWASP ZAP security scan | Scheduled |
-| `generate-intelligence-changelog.yml` | Intelligence changelog generation | Manual/dispatch |
-| `labeler.yml` | Auto-label pull requests/issues | PR/Issue events |
-| `validate-field-completeness.yml` | Validate data field completeness | Push/PR |
-| `validate-json-schemas.yml` | Validate JSON schema files | Push/PR |
-| `validate-view-documentation.yml` | Validate SQL view documentation | Push/PR |
+| `generate-intelligence-changelog.yml` | Intelligence changelog generation | Manual (`workflow_dispatch`) |
+| `labeler.yml` | Pull request auto-labeling | `pull_request_target` |
+| `validate-field-completeness.yml` | JSON export field completeness | Push (path-filtered) |
+| `validate-json-schemas.yml` | JSON schema validation | Push/PR (path-filtered) + scheduled |
+| `validate-view-documentation.yml` | View documentation validation | Scheduled (monthly) + PR (path-filtered) |
 
 ### PostgreSQL Setup Pattern
 ```yaml