Re-apply detection->pat_pool manual lock patch; clarify area-skill paths

- Lock files: gh aw compile only wires pat_pool into the 'agent' job's needs,
  not 'detection', even though the detection job reads
  needs.pat_pool.outputs.pat_number. Without it the COPILOT_GITHUB_TOKEN case()
  collapses to an empty token and threat detection fails. Re-add '- pat_pool' to
  detection.needs in all three locks with the same documented MANUAL PATCH block
  used on main (gh-aw issue #30232).
- area-skills.instructions.md: clarify that table skill paths are relative to
  .github/skills/ and mark the NativeAOT entry as a repo-root path, so an agent
  cannot misread them as nonexistent repo-root-relative skill paths.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: Milos Kotlar

.github/workflows/ci-failure-fix.lock.yml

@@ -6,22 +6,26 @@ need to route a failure, a review, or a change to the right area knowledge
 should reference this table instead of re-declaring their own copy, so the
 mapping stays consistent as skills are added or renamed.
 
-Skills live under `.github/skills/<name>/SKILL.md`. Area-owner handles are
-**not** listed here; resolve owners from
-[`docs/area-owners.md`](../../../docs/area-owners.md) by the issue's `area-*`
-label.
+Skill paths in the table below are relative to `.github/skills/`, so
+`mobile-platforms/SKILL.md` means `.github/skills/mobile-platforms/SKILL.md`.
+The one non-skill entry (NativeAOT) is given as a repo-root-relative path and is
+called out as such. Area-owner handles are **not** listed here; resolve owners
+from [`docs/area-owners.md`](../../../docs/area-owners.md) by the issue's
+`area-*` label.
 
 <a id="area-skill-table"></a>
 
 ## Area → skill table
 
+Skill paths are relative to `.github/skills/`.
+
 | Area / pipeline | Skill(s) | What the skill covers |
 |---|---|---|
 | Mobile (ios / tvos / maccatalyst / android / wasm / wasi) | `mobile-platforms/SKILL.md` | Mobile/wasm test, csproj, and platform-condition knowledge. |
 | JIT / GC / PGO stress (codegen) | `jit-regression-test/SKILL.md`; `ci-pipeline-monitor/SKILL.md` | JIT codegen, assertion triage, regression-test extraction. |
 | `System.Net.*` | `system-net-review/SKILL.md` | Networking stack review and conventions. |
 | `Microsoft.Extensions.*` | `extensions-review/SKILL.md` | Extensions (DI, config, logging, hosting, caching) review. |
-| NativeAOT outer loop | `eng/testing/tests.*aot*.targets` + the test `.csproj` | NativeAOT test wiring (no dedicated skill; read the targets). |
+| NativeAOT outer loop | repo-root `eng/testing/tests.*aot*.targets` + the test `.csproj` | NativeAOT test wiring (no dedicated skill; read the targets). |
 | Generic / unmapped | `ci-pipeline-monitor/SKILL.md` | Cross-cutting CI pipeline monitoring and triage. |
 
 When more than one skill is listed, load them in order; the first carries the