Use locally built MCP gateway in smoke-copilot workflow and trigger on Go PRs (#1080)

## Plan: Update Smoke Copilot Workflow for Local MCP Gateway

- [x] Understand current smoke-copilot.md workflow (uses
ghcr.io/github/gh-aw-mcpg:v0.1.4)
- [x] Update smoke-copilot.md to build and use local MCP gateway
container
  - [x] Add Go setup and Docker buildx setup in frontmatter steps
- [x] Build local container using Dockerfile (tag as local-awmg:v0.1.4)
  - [x] Update sandbox.mcp.container to use locally built image
- [x] Recompile smoke-copilot workflow (compiled with gh-aw)
- [x] Add smoke-copilot test to CI workflow for PRs modifying Go code
  - [x] Create new job in ci.yml that triggers smoke-copilot on PR
  - [x] Job runs after unit-test, lint, and integration-test pass
- [x] Fix container versioning issue
- [x] Container tag: `local-awmg:v0.1.4` (matches compiler expectation)
- [x] VERSION build arg: `dev-<sha>` (correct development version in
binary)
  - [x] Recompiled workflow with updated versioning
- [x] Verify all changes work correctly
  - [x] Workflow compiles successfully with gh-aw compiler
  - [x] All ghcr.io references replaced with local-awmg:v0.1.4
  - [x] Lint checks pass
  - [x] No security vulnerabilities introduced (CodeQL clean)

<!-- START COPILOT CODING AGENT TIPS -->
---

🔒 GitHub Advanced Security automatically protects Copilot coding agent
pull requests. You can protect all pull requests by enabling Advanced
Security for your repositories. [Learn more about Advanced
Security.](https://gh.io/cca-advanced-security)

Author: lpcox

.github/workflows/ci.yml

@@ -135,6 +135,26 @@ jobs:
           path: awmg
           retention-days: 7
 
+  smoke-copilot-pr:
+    runs-on: ubuntu-latest
+    needs: [unit-test, lint, integration-test]
+    if: github.event_name == 'pull_request'
+    permissions:
+      actions: write
+      contents: read
+    steps:
+      - name: Trigger smoke-copilot workflow for PR
+        uses: actions/github-script@v7
+        with:
+          script: |
+            await github.rest.actions.createWorkflowDispatch({
+              owner: context.repo.owner,
+              repo: context.repo.repo,
+              workflow_id: 'smoke-copilot.lock.yml',
+              ref: context.payload.pull_request.head.ref
+            });
+            console.log('✓ Triggered smoke-copilot workflow for PR');
+
   smoke-copilot:
     runs-on: ubuntu-latest
     needs: [unit-test, lint, integration-test]

.github/workflows/smoke-copilot.lock.yml

@@ -47,9 +47,22 @@ tools:
 runtimes:
   go:
     version: "1.25"
+steps:
+  - name: Set up Go
+    uses: actions/setup-go@4dc6199c7b1a012772edbd06daecab0f50c9053c # v6
+    with:
+      go-version-file: go.mod
+      cache: true
+  - name: Set up Docker Buildx
+    uses: docker/setup-buildx-action@v3
+  - name: Build local MCP Gateway container
+    run: |
+      VERSION="dev-$(git rev-parse --short HEAD)"
+      docker build -t local-awmg:v0.1.4 --build-arg VERSION=${VERSION} .
+      echo "✅ Built local MCP Gateway container: local-awmg:v0.1.4 (VERSION=${VERSION})"
 sandbox:
   mcp:
-    container: "ghcr.io/github/gh-aw-mcpg"
+    container: "local-awmg"
 safe-outputs:
     add-comment:
       hide-older-comments: true