refactor(compile): reduce complexity of validate_github_issue_outputs_config in common.rs

[github-actions]

Summary

Clippy's cognitive_complexity lint (threshold 15) flagged validate_github_issue_outputs_config in src/compile/common.rs at 25/15 — the highest-complexity non-test function currently in the codebase.

The function mixed four distinct concerns in one body:

1. Cross-tool require-approval lane consistency for temporary-issue-ID consumers.
2. Per-tool repository-policy + mutation-filter validation, shared across all GitHub issue tools.
3. A 12-arm match dispatching to each tool's dedicated config validator.
4. Pipeline-injection checks scattered across create-github-issue and set-github-issue-type free-text fields.

Changes

Extracted five well-named helpers, each owning one concern:

• validate_temporary_id_consumers_approval_lane — the create-github-issue / consumer approval-lane check.
• validate_github_issue_tool_config — shared repo-policy + mutation-filter validation per tool.
• dispatch_github_issue_tool_config_validation — the tool-name match dispatch (unchanged arms, just isolated).
• validate_create_github_issue_injection — injection checks for create-github-issue's title prefix, labels, allowed-labels, assignees.
• validate_set_github_issue_type_injection — injection checks for set-github-issue-type.allowed.

validate_github_issue_outputs_config now simply orchestrates these helpers in the same original order, preserving all early-return/?-propagation semantics.

Verification

• cargo build — clean.
• cargo test — full suite passes (all binaries/integration tests), no regressions.
• cargo clippy --all-targets --all-features — clean, no new warnings.
• Re-ran clippy::cognitive_complexity with threshold 15: validate_github_issue_outputs_config is no longer flagged (down from 25/15).

No public API, behavior, or error-message changes.

Warning

Firewall blocked 2 domains

The following domains were blocked by the firewall during workflow execution:

• releaseassets.githubusercontent.com
• spsprodeus21.vssps.visualstudio.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "releaseassets.githubusercontent.com"
    - "spsprodeus21.vssps.visualstudio.com"

See Network Configuration for more information.

Generated by Cyclomatic Complexity Reducer · auto · 93.6 AIC · ⌖ 5.76 AIC · ⊞ 11K · ◷

[azure-pipelines]

Azure Pipelines:
2 pipeline(s) were filtered out due to trigger conditions.
There may be pipelines that require an authorized user to comment /azp run to run.

[jamesadevine]

Superseded by the stronger validation decomposition from #2236, now integrated and validated in #2238. Closing as superseded.