[deep-report] Add api.sentrux.dev to daily-sentrux-report network.allowed (regressed after 2 prior fixes) #53178

Description

.github/workflows/daily-sentrux-report.md (lines 26-29) only allows defaults and github in its network.allowed list:

network:
  allowed:
    - defaults
    - github

But the workflow's shared MCP setup (.github/workflows/shared/mcp/sentrux.md:26) downloads the sentrux binary from https://github.com/sentrux/sentrux/releases/download/... (covered by github), and the Sentrux CLI itself calls out to api.sentrux.dev at runtime — which is not in the allowlist. This week's Daily Sentrux Report (discussion #52991, 2026-08-15) shows the firewall blocking exactly this domain: "Firewall blocked 1 domain: api.sentrux.dev."

This is a regression/recurrence of a gap that was supposedly fixed twice before: #43655 ("Fix daily-sentrux-report: allow api.sentrux.dev and add cache-memory") and #40546 ("Allow api.sentrux.dev in daily-sentrux-report firewall"), both closed — yet the current network.allowed list in the source file still does not include this domain.

Expected Impact

Stops the daily Sentrux code-quality audit from silently losing telemetry/functionality to firewall blocks on every run, and closes out a domain-allowlist gap that has already required two prior (apparently non-durable) fix attempts.

Suggested Agent

New Agent (workflow frontmatter config fix)

Estimated Effort

Fast (< 30 min)

Data Source

DeepReport analysis, 2026-08-16 cycle, sourced from discussion #52991 (Daily Sentrux Report) and verified directly against .github/workflows/daily-sentrux-report.md and .github/workflows/shared/mcp/sentrux.md. Prior closed attempts: #43655, #40546.

Generated by 🔬 Deep Report · agent · 257.9 AIC · ⌖ 11 AIC · ⊞ 11.8K · ◷

• expires on Aug 18, 2026, 10:35 AM UTC-08:00