fix(kyberforge): align primitive-author and factory-audit rule tiers

Second clean-context audit found author Must/Should and audit FAIL/SUGGESTION
tiers drifting apart, and author Musts the audit never checked.

- factory-audit: FAIL on absolute or bare relative hook script paths, an
  applyTo present but empty, and unbalanced braces/brackets in applyTo;
  judgment steps for dependency stem collisions, helper .json in hook dirs,
  unresolvable instruction links, prompt model slugs and second-person
  bodies; an unmatched glob drops to SUGGESTION; deliberate tier deviations
  recorded in hook-flow.md; validate.sh --help lists the three new modes;
  DescriptionOpener message no longer prescribes "Use when".
- primitive-author: deprecated routing, extra prompt keys and the prompt
  description contract become Shoulds; hook Musts gain "contributes an
  entry", no bare relative paths, and executable-when-run-directly;
  prompt Must 1 covers hardlinks; Vale prose FAILs resolved at close.
- forge: say "hook, instruction or prompt" rather than "apm primitive".

Refs #94

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KkT7RSDwDbmrM9T34b6sTi

plugins/kyberforge/.apm/skills/factory-audit/tests/validate-primitive.bats

@@ -173,6 +173,37 @@ teardown() {
     refute_output --partial "hardlink"
 }
 
+@test "hook: an absolute script path is a FAIL; an absolute interpreter path is not" {
+    write_hook hooks.json '{"hooks":{"Stop":[{"hooks":[{"type":"command","command":"/usr/local/bin/check.sh","timeout":5}]}]}}'
+    run bash "$SCRIPT" "$PKG/.apm/hooks/hooks.json"
+    assert_failure
+    assert_output --partial "is an absolute path"
+
+    write_hook hooks.json '{"hooks":{"Stop":[{"hooks":[{"type":"command","command":"/usr/bin/env true","timeout":5}]}]}}'
+    run bash "$SCRIPT" "$PKG/.apm/hooks/hooks.json"
+    assert_success
+    refute_output --partial "absolute path"
+}
+
+@test "hook: a bare relative path to a package script is a FAIL; a bare command is not" {
+    write_hook hooks.json '{"hooks":{"Stop":[{"hooks":[{"type":"command","command":".apm/hooks/scripts/check.sh","timeout":5}]}]}}'
+    run bash "$SCRIPT" "$PKG/.apm/hooks/hooks.json"
+    assert_failure
+    assert_output --partial "is a bare relative path"
+
+    write_hook hooks.json '{"hooks":{"Stop":[{"hooks":[{"type":"command","command":"npx some-tool --check","timeout":5}]}]}}'
+    run bash "$SCRIPT" "$PKG/.apm/hooks/hooks.json"
+    assert_success
+    refute_output --partial "bare relative path"
+}
+
+@test "hook: a file contributing no entries is a FAIL" {
+    write_hook hooks.json '{"hooks":{}}'
+    run bash "$SCRIPT" "$PKG/.apm/hooks/hooks.json"
+    assert_failure
+    assert_output --partial "contributes no hook entries"
+}
+
 # ---------------------------------------------------------------------------
 # Instructions
 # ---------------------------------------------------------------------------
@@ -226,6 +257,31 @@ name: python' 'body'
     assert_output --partial "frontmatter key(s) name"
 }
 
+@test "instruction: an applyTo that is present but empty is a FAIL" {
+    write_instruction empty 'description: x
+applyTo: ""' 'body'
+    run bash "$SCRIPT" "$PKG/.apm/instructions/empty.instructions.md"
+    assert_failure
+    assert_output --partial "applyTo is present but empty"
+    refute_output --partial "SUGGESTION  no applyTo"
+}
+
+@test "instruction: an applyTo glob with unbalanced braces is a FAIL" {
+    write_instruction broken 'description: x
+applyTo: "**/*.{py"' 'body'
+    run bash "$SCRIPT" "$PKG/.apm/instructions/broken.instructions.md"
+    assert_failure
+    assert_output --partial "unbalanced braces or brackets"
+}
+
+@test "instruction: a top-level comma list with a brace group passes clean" {
+    write_instruction multi 'description: x
+applyTo: "**/*.py, **/*.{pyi,pyx}"' 'body'
+    run bash "$SCRIPT" "$PKG/.apm/instructions/multi.instructions.md"
+    assert_success
+    refute_output --partial "applyTo"
+}
+
 @test "instruction: the same stem at the package root is a FAIL" {
     write_instruction python 'description: x
 applyTo: "**/*.py"' 'body'