feat: add 3 new error entries (runner-environment x1, permissions-auth x1, triggers x1)

[htekdev]

New Error Entries — Strategy 2 Round 262 (Stack Overflow [github-actions])

Research scope: Stack Overflow [github-actions] top-voted and recent questions cross-checked against all 1476 existing entries.

Entries Added

ID	File	Category	Source
re-505	re-505.yml	runner-environment	SO #77703115 + multiple GitHub issues
pa-124	pa-124.yml	permissions-auth	SO #78746014 (4832 views)
tr-120	tr-120.yml	triggers	SO #79941021 + actions/runner-images#14017 follow-up

Entry Details

re-505 — GPG signing fails with "Inappropriate ioctl for device" in runner

• GitHub Actions runner has no TTY; GPG pinentry cannot prompt for passphrase
• Affects Maven GPG plugin, Gradle signing, git commit --gpg-sign
• Fix: --pinentry-mode loopback in gpg.conf + plugin config

pa-124 — OIDC sub claim for pull_request.closed doesn't match refs/heads/main

• When trigger is pull_request: [closed], OIDC sub is repo:org/repo:pull_request — never refs/heads/main
• AWS IAM trust policies scoped to refs/heads/main reject post-merge deploys
• Fix: add pull_request sub pattern to IAM trust policy OR switch to push trigger

tr-120 — workflow_run downstream trigger keeps firing after upstream workflow is deleted

• Platform caches workflow name→ID; queued completed events drain over minutes/hours post-deletion
• Also covers wrong commit SHA from head_sha pointing to a merged-from-main commit in branch history
• Fix: guard with if: on workflow name + branch + conclusion; prefer reusable workflows