…ot assignment tools (#3221)

assign_copilot_to_issue and assign_copilot_to_issue_with_intent decode owner,
repo and issue_number with mapstructure.WeakDecode, which zero-fills a missing
value instead of erroring. A missing required arg then reached the GraphQL query
and surfaced as a confusing "failed to get suggested actors: Could not resolve
to a Repository" error. Reject the zero values after decoding, matching the
is_suggestion and rationale/confidence checks in the same handlers, so the caller
gets "missing required parameter: <name>". Adds table tests for the missing cases.

Co-authored-by: Justin Willhite <5132924+thejdubb02@users.noreply.github.com>

Bumps golang from 1.27.0-alpine to 1.27.1-alpine.

---
updated-dependencies:
- dependency-name: golang
  dependency-version: 1.27.1-alpine
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

…ata (#3251)

* fix(oauth): advertise only default scopes in metadata

Keep the full OAuth scope catalog available for per-tool step-up challenges, but limit protected resource discovery to the lower-risk default grant.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

* Update expectedScopes in oauth_test.go

Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>

---------

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>