[log] Add debug logging to workflow pkg files lacking coverage

[github-actions]

Adds logger.New declarations and meaningful log.Printf/log.Print calls to five workflow-package files that had no or minimal debug logging. All log arguments are side-effect-free.

Files changed

File	Change
pkg/workflow/cache_integrity.go	New cacheIntegrityLog; logs policy-hash computation, sentinel selection, cache-key generation, and integrity-level ordering
pkg/workflow/safe_outputs_tools_computation.go	New safeOutputsToolsComputationLog; logs when no safe-outputs config is present and the final enabled-tool count
pkg/workflow/validation_helpers.go	New validationHelpersLog; logs mount-format parse results (success and each failure path) and trigger-lookup outcome
pkg/workflow/mcp_rendering.go	Logs renderer-factory creation parameters and standard-renderer construction
pkg/workflow/expression_nodes.go	Logs inline disjunction rendering term count (companion to existing multiline path)

Quality checklist

• ≤ 5 files modified
• No test files (*_test.go) modified
• Each new logger follows "pkg:filename" naming convention
• Log arguments are literals or already-computed values — no side effects
• Log messages are meaningful and not duplicated with existing output
• make build passes with no errors
• go build ./... passes with no errors

Generated by Go Logger Enhancement · ◷

• expires on Mar 31, 2026, 9:31 PM UTC