autofix workflow fails on any PR touching .github/workflows/ (App lacks workflows permission) — blocks standards-sync convergence #480

The autofix workflow's git push is rejected on any PR that modifies a .github/workflows/ file: refusing to allow a GitHub App to create or update workflow … without workflows permission. Every standards-sync convergence PR touches workflow stubs, so autofix fails on all of them — and the org PR-review engine gates on all checks (incl non-required), so this blocks auto-approval/merge (e.g. #479). Fix options: (a) skip autofix when the PR only changes .github/workflows/**; (b) don't run autofix on standards-sync PRs; (c) tolerate the workflow-file push rejection (commit non-workflow fixes only). Surfaced by Epic combsmith/.github#850 / #857 convergence.