Bump AWF to v0.25.24 and mcpg to v0.2.24

[lpcox]

Version Bumps

Please update the following dependency versions in gh-aw:

AWF (Agentic Workflow Firewall)

• Current: (check current)
• Target: v0.25.24
• Repo: github/gh-aw-firewall

mcpg (DIFC Proxy)

• Current: (check current)
• Target: v0.2.24
• Repo: github/gh-aw-mcpg

Key changes in these versions

AWF v0.25.24:

• Added GIT_SSL_CAINFO to cli-proxy sidecar entrypoint — fixes gh repo clone SSL certificate verification failures when routing through the DIFC proxy (unable to get local issuer certificate error)
• Added GIT_SSL_CAINFO to cli-proxy server.js PROTECTED_ENV_KEYS to prevent agent TLS trust-store bypass

mcpg v0.2.24:

• TLS trust environment propagation fix — configureTLSTrustEnvironment() now properly sets SSL cert env vars for child processes