A repository administrator is configuring Copilot cloud agent setup steps for a Node.js repository. The setup must install private packages from GitHub Packages before Copilot starts work, but the workflow should not grant pull request write access or use the wrong setup job name. Which option completes the workflow?

The correct option ensures the workflow can access private packages without granting unnecessary permissions or using an incorrect job name. Missing value 1 = packages: To install private packages from GitHub Packages, the workflow needs packages: read permission. This allows it to authenticate and download the necessary packages. Missing value 2 = none: The requirement states the workflow should not grant pull request write access. Setting pull-requests: none (or omitting it entirely, as none is the default for pull-requests if not specified) prevents the workflow from modifying pull requests. write would grant excessive permissions. Missing value 3 = copilot-setup-steps: The job name should align with the workflow's purpose and the provided context. The prompt explicitly states "the wrong setup job name" if not copilot-setup-steps, making this the correct choice. copilot-setup or setup are not the specified correct job names.