Refactor GitHub CLI token assignment for consistency across workflows

Author: pelikhan

.github/workflows/copilot-pr-merged-report.lock.yml

@@ -6,7 +6,9 @@ description: Create a poem about GitHub and save it to repo-memory
 timeout-minutes: 5
 strict: false
 engine: copilot
+
 permissions: read-all
+
 tools:
   github: false
   edit:
@@ -17,7 +19,7 @@ safe-outputs:
   create-issue:
   staged: true
 steps:
-  - name: download issues data
+  - name: Download issues data
     run: |
       gh pr list --limit 1 --json number,title,body,author,createdAt,mergedAt,state,url
     env:

.github/workflows/dev.lock.yml

@@ -16,7 +16,7 @@ safe-inputs:
     run: |
       echo "gh $INPUT_ARGS"
       echo "  token: ${GH_AW_GH_TOKEN:0:6}..."
-      GH_TOKEN=$GH_AW_GH_TOKEN gh $INPUT_ARGS
+      GH_TOKEN="$GH_AW_GH_TOKEN" gh $INPUT_ARGS
 ---
 
 **IMPORTANT**: Always use the `safeinputs-gh` tool for GitHub CLI commands instead of running `gh` directly via bash. The `safeinputs-gh` tool has proper authentication configured with `GITHUB_TOKEN`, while bash commands do not have GitHub CLI authentication by default.