Increase default max-patch-size from 1 MB to 4 MB and improve patch-size-exceeded error messages

.github/aw/safe-outputs-content.md

@@ -195,7 +195,7 @@ description: Safe-output reference for issue, discussion, comment, and pull requ
       allowed-base-branches:          # Optional: glob patterns for allowed base branch overrides per run
         - "release/*"
         - "main"
-      max-patch-size: 2048            # Optional: per-output cap on git patch size in KB (overrides global; default: 1024 KB, max: 10240)
+      max-patch-size: 2048            # Optional: per-output cap on git patch size in KB (overrides global; default: 4096 KB, max: 10240)
       max-patch-files: 50             # Optional: per-output cap on unique files in the patch (overrides global; default: 100)
   ```
 

.github/aw/safe-outputs-management.md

@@ -263,7 +263,7 @@ description: Safe-output reference for update, label, milestone, project, releas
       excluded-files:                 # Optional: glob patterns to strip from the patch entirely
         - "**/*.lock"
       protected-files: blocked        # Optional: "blocked" (default), "fallback-to-issue", or "allowed"
-      max-patch-size: 2048            # Optional: per-output cap on git patch size in KB (overrides global; default: 1024 KB, max: 10240)
+      max-patch-size: 2048            # Optional: per-output cap on git patch size in KB (overrides global; default: 4096 KB, max: 10240)
   ```
 
   Not supported for cross-repository operations. To trigger CI on pushed commits, use `github-token-for-extra-empty-commit` or set the magic secret `GH_AW_CI_TRIGGER_TOKEN`.

.github/aw/safe-outputs-runtime.md

@@ -191,7 +191,7 @@ Fields that influence permission computation (`add-comment.discussions`, `create
 
 - `timeout-minutes:` - Timeout for the safe-outputs job in minutes (integer, default: `45`)
   - Increase for workflows with many sequential safe-output operations (e.g. `push-to-pull-request-branch` against large repositories)
-- `max-patch-size:` - Maximum allowed git patch size in kilobytes (integer, default: 1024 KB = 1 MB)
+- `max-patch-size:` - Maximum allowed git patch size in kilobytes (integer, default: 4096 KB = 4 MB)
   - Patches exceeding this size are rejected to prevent accidental large changes
 - `max-patch-files:` - Maximum allowed number of unique files in a create-pull-request patch (integer, default: 100)
   - Counts unique file paths deduplicated across multi-commit patches; reflects how many distinct files the agent is pushing per iteration

.github/aw/syntax-agentic.md

@@ -449,7 +449,7 @@ description: Agentic workflow specific frontmatter fields for GitHub Agentic Wor
   - `runs-on:` — runner for safe-output jobs (default: `ubuntu-slim`)
   - `messages:` — custom footer/notification message templates
   - `env:` — environment variables for safe-output jobs
-  - `max-patch-size:` — maximum git patch size in KB (default: 1024)
+  - `max-patch-size:` — maximum git patch size in KB (default: 4096)
 
 
 - **`mcp-scripts:`** - Define custom lightweight MCP tools as JavaScript, shell, Python, or Go scripts (object)