Improve Evergreen CI diagnostics

[mrjf]

Summary

• raise Evergreen runs to a 60 minute workflow budget and 10 minute shell command budget
• expand bash tool access so Evergreen can read CI logs, inspect diffs, and run the repo's Bun lint/test diagnostics
• require the agent to gather exact CI diagnostics before guessing or delegating
• prefer GH_AW_CI_TRIGGER_TOKEN for deterministic CI reruns, falling back to github.token only when the secret is absent

Validation

• gh aw compile .github/workflows/evergreen.md --validate --strict --approve --no-check-update
• gh aw lint --dir .github/workflows

[mrjf]

@copilot fix test