feat(safeoutputs): add GitHub issue mutation family

[jamesadevine]

Summary

• port gh-aw's GitHub issue mutation family as eleven GitHub-qualified, configured-only safe outputs
• add shared fail-closed repository, filter, temporary-ID, REST/GraphQL, and Stage 3 App-permission infrastructure
• extend approval summaries, documentation, compiler coverage, and executor E2E scenarios for the complete family

Closes #1871

Test plan

• cargo check --tests
• cargo test (3,395 passed, 1 ignored)
• cargo clippy --all-targets -- -D warnings
• changed-file Rust formatting check and git diff --check
• npm test -- --maxWorkers=1 in scripts/ado-script (1,130 passed)
• npm run typecheck
• npm run build:approval-summary
• npm run build:executor-e2e
• live GitHub mutation scenarios require the documented E2E credentials and were not run locally

[azure-pipelines]

Azure Pipelines:
Successfully started running 2 pipeline(s).
There may be pipelines that require an authorized user to comment /azp run to run.