chore: bump shared/apm.md to microsoft/apm-action@v1.4.2 (#904)

v1.4.2 fixes the restore-mode workspace pollution that caused #901 and
the CI failure surfaced in #889. With v1.4.2, restore mode installs APM
and uses 'apm unpack' to extract bundles, writing only files declared in
the lockfile's deployed_files instead of overwriting tracked
apm.lock.yaml / apm.yml / apm_modules in the caller's git workspace.

- shared/apm.md: bump both pack + restore steps to @v1.4.2
- pr-review-panel.lock.yml: regenerated via 'gh aw compile' (SHA pin updated)
- actions-lock.json: SHA pin updated

Closes #902.
Upstream: microsoft/apm-action#27, release v1.4.2.

Co-authored-by: Copilot <223556219+Copilot@users.noreply.github.com>

Author: danielmeppiel

.github/aw/actions-lock.json

@@ -35,10 +35,10 @@
       "version": "v0.52.1",
       "sha": "a86e657586e4ac5f549a790628971ec02f6a4a8f"
     },
-    "microsoft/apm-action@v1.4.1": {
+    "microsoft/apm-action@v1.4.2": {
       "repo": "microsoft/apm-action",
-      "version": "v1.4.1",
-      "sha": "a190b0b1a91031057144dc136acf9757a59c9e4d"
+      "version": "v1.4.2",
+      "sha": "9fe9337ef58b5e620e0113071ceb47a6a8a232f7"
     }
   }
 }

.github/workflows/pr-review-panel.lock.yml

@@ -46,7 +46,7 @@ jobs:
           } >> "$GITHUB_OUTPUT"
       - name: Pack APM packages
         id: apm_pack
-        uses: microsoft/apm-action@v1.4.1
+        uses: microsoft/apm-action@v1.4.2
         env:
           GITHUB_TOKEN: ${{ secrets.GH_AW_PLUGINS_TOKEN || secrets.GH_AW_GITHUB_TOKEN || secrets.GITHUB_TOKEN }}
         with:
@@ -74,7 +74,7 @@ steps:
     id: apm_bundle
     run: echo "path=$(find /tmp/gh-aw/apm-bundle -name '*.tar.gz' | head -1)" >> "$GITHUB_OUTPUT"
   - name: Restore APM packages
-    uses: microsoft/apm-action@v1.4.1
+    uses: microsoft/apm-action@v1.4.2
     with:
       bundle: ${{ steps.apm_bundle.outputs.path }}
 ---