A repository allows Copilot coding agent to open draft pull requests for issue assignments. The team wants a validation workflow that captures failure evidence when tests fail, uploads diagnostic artifacts, and still fails the required check so maintainers cannot merge broken agent output. Which option completes the workflow?

name: validate-agent-pr

on:
  pull_request:
    branches:
      - main

permissions:
  contents: read
  pull-requests: read

jobs:
  validate:
    runs-on: ubuntu-latest
    steps:
      - uses: actions/checkout@v4

         - name: Run test suite
           id: tests
           (Missing value 1): |
             mkdir -p diagnostics
             npm ci
             npm test 2>&1 | tee diagnostics/test-output.txt

         - name: Upload diagnostics
           if: (Missing value 2)
           uses: actions/upload-artifact@v4
           with:
             name: agent-pr-diagnostics-${{ github.event.pull_request.number }}
             path: diagnostics/
             if-no-files-found: error

         - name: Preserve failed check result
           if: steps.tests.outcome == 'failure'
           (Missing value 3): exit 1