Address awesome-copilot review comments in course content

[GeekTrainer]

Description

Review of the Learning Hub mirror PR (github/awesome-copilot#2800) surfaced a set of issues in the source course content: the permission story leaned on full YOLO mode, a hook script was fetched from a mutable branch, one exercise told the agent to auto-merge generated infrastructure code, and there were assorted grammar, spelling, and path errors. This PR fixes all of them at the source so the next content sync carries the corrections into the mirror.

The headline change is the permission rework. Instead of launching copilot --yolo, the course now relies on the codespace pre-approving a scoped set of local tools (file writes, builds, local git) while still prompting for anything that spends GitHub credentials or reaches the network. Module 1 explains where those approvals live (permissions-config.json) and how to pre-approve with --allow-tool, and Modules 5, 6, and 7 get a consistent lead-in describing the pre-approved-tools model. The devcontainer that actually seeds those approvals is handled separately in github-samples/contoso-inventory.

Related Issue

N/A

Type of Change

• 🐛 Content fix (corrects an error or unclear instruction)
• ✨ New content (adds a module, exercise, or section)
• 📚 Content update (revises or expands existing content)
• 🔧 Chore (tooling, config, or repository housekeeping)

Changes Made

• Module 1 - document that "don't ask again" approvals persist per folder in permissions-config.json and can be pre-approved at launch with --allow-tool; note the course codespace ships a pre-approved set of local tools.
• Modules 5/6/7 - replace copilot --yolo with plain copilot (Module 5 uses --allow-tool playwright), each with a shared lead-in explaining the codespace's scoped, pre-approved local tools.
• Module 0 - add the "Include all branches" template step so the start-of-module-* catch-up branches are copied.
• Module 4 - pin the hook script download to an immutable commit and add curl --fail; remove a stray closing parenthesis.
• Module 7 - replace the auto-merge instruction with a human review gate for the generated MCP server; fix the malformed numbered list, a missing article, verb agreement, and a stray colon.
• Module 2 - correct the repo-scoped skills path to .github/skills/; remove a duplicated article.
• Module 6 - fix "time to being" -> "perform", "steps lessons" -> "steps and lessons", and a duplicated article.

Checklist

• My content follows the Markdown conventions
• I built or previewed the affected content where applicable
• All internal and external links resolve
• My changes are focused on a single concern
• I have written clear commit messages explaining what and why

Additional Notes

The Playwright MCP command in Module 5 is intentionally left at @latest (the reviewer suggested pinning; we opted to keep it current). The start-of-module template step depends on github-samples/contoso-inventory being a public template repo, which is now configured.

[Copilot]

Pull request overview

This PR updates the course modules in content/ to address review feedback from the Learning Hub mirror PR, primarily tightening the permission model (removing --yolo), pinning mutable references, and fixing a set of instruction/grammar/path issues so the next sync carries corrected guidance.

Changes:

• Reworks Copilot CLI permission guidance across modules to rely on scoped, pre-approved local tools (and targeted --allow-tool) rather than copilot --yolo.
• Pins the lifecycle hook script download to an immutable commit and adds curl --fail.
• Fixes multiple content issues (repo-scoped skills path, list formatting, and assorted grammar/spelling/punctuation).

Show a summary per file

File	Description
content/00-prerequisites.md	Adds the template “Include all branches” step so start-of-module-* catch-up branches are copied into learners’ forks.
content/01-working-with-copilot-cli.md	Documents how “don’t ask again” permissions persist and how to pre-approve tools with --allow-tool.
content/02-building-ai-infrastructure.md	Corrects the repo-scoped skills directory path to .github/skills/ and cleans up wording.
content/04-lifecycle-hooks.md	Pins the hook script download to a specific commit and adds curl --fail; fixes a stray punctuation issue.
content/05-add-feature-barcode.md	Replaces YOLO guidance with scoped pre-approval for Playwright via --allow-tool playwright.
content/06-modernize-apps.md	Removes --yolo usage and fixes multiple phrasing/grammar issues; adds consistent pre-approved-tools guidance.
content/07-manage-infrastructure.md	Removes --yolo, adds a human review gate for generated infra PRs, and fixes list/punctuation issues.

Review details

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

• Files reviewed: 7/7 changed files
• Comments generated: 5
• Review effort level: Lite