Rename detect-repo-visibility to determine-automatic-lockdown and require custom token

Co-authored-by: pelikhan <4175913+pelikhan@users.noreply.github.com>

Author: Copilot

pkg/workflow/mcp_renderer.go

@@ -45,7 +45,7 @@ func (r *MCPConfigRendererUnified) RenderGitHubMCP(yaml *strings.Builder, github
 
 	// Get lockdown value - use detected value if lockdown wasn't explicitly set
 	lockdown := getGitHubLockdown(githubTool)
-	
+
 	// Check if automatic lockdown determination step will be generated
 	// This requires: lockdown not explicitly set AND custom token configured
 	customGitHubToken := getGitHubToken(githubTool)
@@ -55,7 +55,7 @@ func (r *MCPConfigRendererUnified) RenderGitHubMCP(yaml *strings.Builder, github
 	}
 	hasCustomToken := customGitHubToken != "" || toplevelToken != ""
 	shouldUseStepOutput := !hasGitHubLockdownExplicitlySet(githubTool) && hasCustomToken
-	
+
 	if shouldUseStepOutput {
 		// Use the detected lockdown value from the step output
 		// This will be evaluated at runtime based on repository visibility

pkg/workflow/mcp_servers.go

@@ -793,10 +793,10 @@ func (c *Compiler) generateGitHubMCPLockdownDetectionStep(yaml *strings.Builder,
 	// The step only applies when GH_AW_GITHUB_MCP_SERVER_TOKEN is explicitly configured
 	customGitHubToken := getGitHubToken(githubTool)
 	toplevelToken := data.GitHubToken
-	
+
 	// Determine if a custom token is being used (not the default fallback)
 	hasCustomToken := customGitHubToken != "" || toplevelToken != ""
-	
+
 	if !hasCustomToken {
 		mcpServersLog.Print("No custom GitHub MCP server token defined, skipping automatic lockdown determination")
 		return