Cleanup: Remove workflow cancellation API calls from compiler (#1630)

Author: Copilot

.changeset/patch-remove-workflow-cancellation-api.md

@@ -69,29 +69,8 @@ func (c *Compiler) buildCreateOutputIssueJob(data *WorkflowData, mainJobName str
 
 	var steps []string
 
-	// Add permission checks if no task job was created but permission checks are needed
-	if !taskJobCreated && c.needsRoleCheck(data, frontmatter) {
-		// Add team member check step
-		steps = append(steps, "      - name: Check team membership for workflow\n")
-		steps = append(steps, "        id: check-team-member\n")
-		steps = append(steps, "        uses: actions/github-script@v8\n")
-
-		// Add environment variables for permission check
-		steps = append(steps, "        env:\n")
-		steps = append(steps, fmt.Sprintf("          GITHUB_AW_REQUIRED_ROLES: %s\n", strings.Join(data.Roles, ",")))
-
-		steps = append(steps, "        with:\n")
-		steps = append(steps, "          script: |\n")
-
-		// Generate the JavaScript code for the permission check
-		scriptContent := c.generateRoleCheckScript(data.Roles)
-		scriptLines := strings.Split(scriptContent, "\n")
-		for _, line := range scriptLines {
-			if strings.TrimSpace(line) != "" {
-				steps = append(steps, fmt.Sprintf("            %s\n", line))
-			}
-		}
-	}
+	// Permission checks are now handled by the separate check-membership job
+	// which is always created when needed (when activation job is created)
 
 	// Build custom environment variables specific to create-issue
 	var customEnvVars []string