feat: add 3 new error entries (permissions-auth, caching-artifacts, runner-environment)

[htekdev]

3 new error entries — July 7, 2026 cycle

pa-126 — Copilot CLI in Actions: copilot-requests: write missing

• Source: GitHub Changelog Jul 2, 2026
• Category: permissions-auth | Severity: error
• New GITHUB_TOKEN auth for Copilot CLI requires copilot-requests: write permission that most users omit, causing 403 "Resource not accessible by integration". Also documents org policy requirement.

ca-157 — pull_request_target / issue_comment cache saves silently skipped

• Source: GitHub Changelog Jun 26, 2026
• Category: caching-artifacts | Severity: silent-failure
• GitHub now issues read-only cache tokens for untrusted triggers. Cache saves via actions/cache on pull_request_target, issue_comment, and fork workflow_run cascades are silently no-opped with a warning. Fix: split cache-warm into a trusted-trigger workflow.

re-522 — Org admin disables standard hosted runner labels → jobs queue indefinitely

• Source: GitHub Changelog Jun 25, 2026
• Category: runner-environment | Severity: error
• New Team/Enterprise feature lets org admins disable standard labels (ubuntu-latest, etc.). Workflows using those labels queue indefinitely or fail with "No runner matching labels". Fix: use runner group routing.

---

Validation pass: 10 entries validated — all accurate, no corrections needed this cycle.
Merge queue: PRs #438-441 re-queued for Hector approval.

[htekdev]

✅ Approved by Hector for agent merge at 2026-07-07T20:24:51.822Z

The Rocha merge-agent will rebase this PR onto the latest main, wait for CI, and merge when green. This approval persists across rebases.