[docs] docs: update --image-tag CLI reference for digest-aware format

[github-actions]

Documentation Sync — 2026-04-19

This PR synchronizes docs-site/src/content/docs/reference/cli-reference.md with the digest-aware --image-tag feature shipped in commit 52969fc.

Changes Made

• Updated docs-site/src/content/docs/reference/cli-reference.md:
  • Quick-reference table entry for --image-tag now shows the full digest-metadata format instead of just "Container image tag"
  • Expanded the ### --image-tag <tag> section with a full description of the digest-pinning format, when to use it, and which digest key maps to which --agent-image preset
  • Updated the predownload subcommand table to list all five supported image keys (squid, agent, agent-act, api-proxy, cli-proxy) and cross-link to the main --image-tag section

Code Changes Referenced

• Commit 52969fc: Add digest-aware AWF runtime image pinning via image-tag metadata — introduced src/image-tag.ts, updated action.yml outputs, and partially updated docs/github_actions.md and docs/usage.md, but left docs-site/src/content/docs/reference/cli-reference.md with stale one-liner descriptions

Verification

• Format string verified against src/image-tag.ts (IMAGE_DIGEST_KEYS constant)
• Preset-to-key mapping verified against src/cli.ts option description
• Consistent with existing table style in the file

Generated by Documentation Maintainer · ● 889.7K · ◷

[github-actions]

🔥 Smoke Test: Copilot BYOK (Offline) Mode

Test	Result
GitHub MCP (list PRs)	✅ PR #2086 "Add digest-aware AWF runtime image pinning via image-tag metadata"
GitHub.com Connectivity	⚠️ Pre-step data unavailable (template vars not substituted)
File Write/Read	⚠️ Pre-step data unavailable (template vars not substituted)
BYOK Inference	✅ Agent responding via api-proxy → api.githubcopilot.com

Running in BYOK offline mode (COPILOT_OFFLINE=true) via api-proxy → api.githubcopilot.com.

Overall: PARTIAL — BYOK inference and MCP confirmed ✅; pre-step smoke data was not injected (scheduled run on main with no PR context, template variables unresolved).

PR #2095 author: @github-actions (no assignees).

🔑 BYOK report filed by Smoke Copilot BYOK

[github-actions]

Smoke test report\n- Add digest-aware AWF runtime image pinning via image-tag metadata\n- Optimize security-guard Claude token usage via prompt cache alignment and smaller diff payloads\nResults: merged-PR-review ✅ | safeinputs-gh-query ✅ | playwright-title ✅ | tavily-search ❌ | file-write ✅ | bash-cat ✅ | discussion-comment ✅ | npm-build ✅\nOverall status: FAIL

Warning

⚠️ Firewall blocked 3 domains

The following domains were blocked by the firewall during workflow execution:

• ab.chatgpt.com
• chatgpt.com
• registry.npmjs.org

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "ab.chatgpt.com"
    - "chatgpt.com"
    - "registry.npmjs.org"

See Network Configuration for more information.

🔮 The oracle has spoken through Smoke Codex