docs: document temporary IDs for issue creation and lockdown mode for GitHub tool (#4722)

Author: github-actions[bot]

docs/src/content/docs/reference/safe-outputs.md

@@ -88,6 +88,30 @@ safe-outputs:
     target-repo: "owner/repo"        # cross-repository
 ```
 
+#### Temporary IDs for Issue References
+
+When creating multiple issues, use temporary IDs to reference parent issues before they're created. The agent provides a `temporary_id` field with format `aw_` followed by 12 hex characters.
+
+**Agent Output Format:**
+```json
+[
+  {
+    "type": "create_issue",
+    "title": "Parent Issue",
+    "body": "This is the parent issue",
+    "temporary_id": "aw_abc123def456"
+  },
+  {
+    "type": "create_issue",
+    "title": "Sub Issue",
+    "body": "References #aw_abc123def456",
+    "parent": "aw_abc123def456"
+  }
+]
+```
+
+References like `#aw_abc123def456` in issue bodies are automatically replaced with the actual issue number (e.g., `#42`) after the parent issue is created. The `parent` field creates a sub-issue relationship.
+
 ### Close Issue (`close-issue:`)
 
 Closes GitHub issues with an optional comment and state reason. Filters by labels and title prefix control which issues can be closed.

docs/src/content/docs/reference/tools.md

@@ -126,6 +126,16 @@ tools:
     read-only: true
 ```
 
+**Lockdown Mode**: Limit content from public repositories to items authored by users with push access. Private repositories and collaborator-owned content remain unaffected:
+
+```yaml wrap
+tools:
+  github:
+    lockdown: true
+```
+
+Lockdown mode filters issue comments, sub-issues, and PR content to prevent exposure of potentially untrusted content from public repositories. Useful for security-sensitive workflows processing public repository data.
+
 ## Playwright Tool (`playwright:`)
 
 Enables browser automation using containerized Playwright with domain-based access control: