[ci-scan] Allow update-issue against any issue (target: "*")

Run 26632724700 failed the safe_outputs step because update-issue
defaulted to target: triggering and there is no triggering issue in a
scheduled run. The agent is trying to update the KPI tracker issue,
which it discovers by title and label rather than by being triggered on
it.

Set target: "*" so the agent must explicitly supply the issue number
in its update_issue call. Tracker discovery is already part of the
agent's prompt.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: Milos Kotlar

.github/workflows/ci-failure-scan-feedback.lock.yml

@@ -73,6 +73,7 @@ safe-outputs:
     labels: [agentic-workflows]
     allowed-labels: [agentic-workflows]
   update-issue:
+    target: "*"
     max: 1
   noop:
     report-as-issue: false