Adds logResource debug logger to internal/difc/resource.go and introduces 3 meaningful logging calls in key DIFC label aggregation and filtering methods.

Changes

File modified: internal/difc/resource.go

1. Added import "github.com/github/gh-aw-mcpg/internal/logger"
2. Added package-level logger: var logResource = logger.New("difc:resource")
3. Added 3 debug logging calls:

Why these locations?

The difc/resource.go file contains the core DIFC data structures for label aggregation and filtering. These methods are called during every tool invocation to determine what data an agent can access. Adding logging here:

• Helps debug DIFC policy issues: When an agent reports "missing data", you can see exactly how many items were filtered vs accessible
• Provides visibility into label aggregation: Shows when collection labels are being computed for access decisions
• Zero performance overhead when debug is off: Uses logResource.Printf() which is a no-op unless DEBUG=difc:* is set

Testing

Enable debug logging to see the new output:

DEBUG=difc:* ./awmg --config config.toml

Quality Checklist

• Exactly 1 file modified
• No test files modified
• Logger naming follows pkg:filename convention (difc:resource)
• Logger arguments use only len() (built-in, no side effects)
• Messages are meaningful for debugging DIFC behavior
• No duplicate logging with existing logs
• Import statements properly formatted

Generated by Go Logger Enhancement