fix: allow awmg-mcpg gateway in workflow firewalls

[google-labs-jules]

This change adds the internal MCP gateway hostname awmg-mcpg to the allowed network domains list in the frontmatter of all three agentic workflows and refreshes their generated .lock.yml files, resolving the firewall network block.

Fixes #992
Progresses #898

---

PR created automatically by Jules for task 17777940839649608045 started by @groupthinking

[google-labs-jules]

👋 Jules, reporting for duty! I'm here to lend a hand with this pull request.

When you start a review, I'll add a 👀 emoji to each comment to let you know I've read it. I'll focus on feedback directed at me and will do my best to stay out of conversations between you and other bots or reviewers to keep the noise down.

I'll push a commit with your requested changes shortly after. Please note there might be a delay between these steps, but rest assured I'm on the job!

For more direct control, you can switch me to Reactive Mode. When this mode is on, I will only act on comments where you specifically mention me with @jules. You can find this option in the Pull Request section of your global Jules UI settings. You can always switch back!

New to Jules? Learn more at jules.google/docs.

---

For security, I will only act on instructions from the user who triggered this task.

[vercel]

The latest updates on your projects. Learn more about Vercel for GitHub.

Project	Deployment	Actions	Updated (UTC)
v0-uvai	Canceled		Jul 27, 2026 10:21pm

[github-actions]

🔍 PR Validation

✅ Current validation passed.

[github-actions]

Agent Completion Truth Gate: BLOCKED

Reasons: evidence_collection_failed, missing_agent_result, missing_copilot_current_head_review, missing_copilot_rabbit_label, required_checks_failed, draft_pr, missing_test_evidence

Machine-readable verdict

{
  "details": {
    "collection_errors": [
      "incomplete_linked_issue_contract",
      "missing_intent_snapshot",
      "agent_run_id_mismatch",
      "agent_login_mismatch"
    ],
    "identity_projection": {
      "agent_login": "google-labs-jules[bot]",
      "issue_number": 992,
      "run_id": "17777940839649608045"
    }
  },
  "reasons": [
    "evidence_collection_failed",
    "missing_agent_result",
    "missing_copilot_current_head_review",
    "missing_copilot_rabbit_label",
    "required_checks_failed",
    "draft_pr",
    "missing_test_evidence"
  ],
  "verdict": "blocked"
}

Workflow evidence

[groupthinking]

Closing — branch orphaned by the secret-purge force-push

No common ancestor with current main, so this branch cannot be rebased.

Workflow firewall allowance for the awmg-mcpg gateway is unlanded. Tracked in #1378 alongside #1050, which covers adjacent agentic-workflow configuration.

Branch retained for archive-tagging.

---

Generated by Claude Code