chore: bump @github/copilot-sdk to 1.0.13 and @github/copilot to 1.0.84-1 - #334665

PR classified as community.

⚠️ Head commit is NOT signed by a trusted team member, so the full 3-approval requirement applies. (Head commit ef78708 is signed by GitHub, not by a trusted team member. GitHub adds its own "Verified" signature to commits it creates on your behalf — e.g. edits made in the github.com web editor, suggestions applied from a review, or commits made via Codespaces or the GitHub API. That signature only proves GitHub made the commit, not that a trusted team member authored it, so it does not earn the signing credit. To get the credit, create the commit locally, and sign it with a trusted key.)

Tip: to earn the credit (−1 approval), the head commit must be signed by you with one of your own keys listed in security/trusted-signing-keys.csv. A "Verified" badge that GitHub adds to commits it creates on your behalf — web-editor edits, applied suggestions, Codespaces, API commits — does not count.

⚠️ Collaborator approvals: 0/3.

Needs 3 more collaborator approvals to merge.

✅ No newly added runnable binary files.

❌ Protected engineering system changes are not allowed:

• build/.moduleignore

Only team-member-authored PRs, PRs with a trusted team-member-signed head commit, and authorized automation may change these engineering systems.

Package automation validation: Authorized root and remote Copilot dependency update.

Automation rules

✅ copilot-sdk-cli-bump automation rules passed.