feat(kyberforge): enforce the ADR-0020 context contract for skills and agents

Skill name+description pairs are preloaded into every session, costing
~6,200 tokens across 39 skills before any skill is invoked. The authoring
rules mandated that growth: skill-author:104 and description-quality.md:21
both required padding, while skill-author:102 (the deflating rule) had no
FAIL condition behind it.

Gates (blocking, no baseline file):
- description 250 chars SUGGESTION / 400 FAIL, measured on the folded
  YAML value
- body-only 600 words SUGGESTION / 900 FAIL, independent of the unchanged
  whole-file 2770-word / 500-line spec backstop
- every boundary-clause routing target must resolve to a real skill or
  agent; catches skill-improve, neuledge-context and gitea-labels
- agents take the description gates but deliberately no body gate; a test
  pins that absence

Vale: DescriptionOpener widened to ^This\b, new CompositionNote rule
banning architecture notes from descriptions. 10 hits, 0 false positives.

Kyberforge's own four skills retrofitted: descriptions 3,364 -> 938 chars
(-72%), bodies 8,306 -> 2,487 words (-70%), all via the apm-workflow
dispatch pattern. Fixes the skill-improve dangling route and the
agent-author misroute to manual review.

Also fixes a pre-existing false positive where any line-initial 'read '
was flagged as interactive input, which had already caused two scripts to
be rewritten around it.

Refs: ADR-0020

plugins/kyberforge/skills/agent-author/assets/README.md

@@ -3,6 +3,7 @@
 ## templates/
 
 Annotated agent definition templates copied by `scripts/new-agent.sh` when scaffolding a new agent.
+All three scaffold the `description` in the three-part ADR-0020 shape — a `Use when` trigger clause, at most one capability clause, and a boundary clause — rather than the deleted action-verb opener, and each carries a delegate-don't-restate note in the body.
 
 - **`claude-code.md`** — Claude Code agent definition template (project/user scope). Includes all supported frontmatter fields (required and optional) with inline guidance comments and `FILL IN:` placeholders.
 - **`copilot.agent.md.template`** — Copilot CLI agent definition template (CLI format, project/user scope). Excludes cloud/IDE-only fields (`target`, `user-invocable`, `disable-model-invocation`, `mcp-servers`) and Claude Code-only fields. Uses Copilot tool aliases (`execute`, `read`, `edit`, `search`, `agent`, `web`).

plugins/kyberforge/skills/agent-author/assets/templates/apm-agent.md

@@ -27,11 +27,17 @@
 name: AGENT_NAME
 <!-- Required. Lowercase letters and hyphens only. Must be unique within the scope. -->
 
-description: FILL IN: Action-first description of what this agent does and when to invoke it.
-<!-- Required. The primary signal for autonomous delegation.
-     Start with a verb: "Reviews...", "Analyzes...", "Generates..."
-     Be specific about the triggering condition and expertise domain.
-     Example: "Reviews pull request diffs for security issues. Use proactively after code changes." -->
+description: FILL IN: Use when <trigger>. <One capability clause.> Not <thing> -> <name>.
+<!-- Required. The primary signal for autonomous delegation, and preloaded into every
+     session whether or not this agent is ever used. Three parts, nothing else:
+     a trigger clause opening "Use when", at most one capability clause, and a
+     boundary clause naming a real sibling skill or agent.
+     250 characters is the target, 400 the hard ceiling (ADR-0020).
+     Do not open with an action verb ("Reviews...", "Analyzes...") — that rule was
+     deleted. Add "Use proactively" only if the runtime should delegate here without
+     the user naming this agent.
+     Example: "Use when a diff needs checking for injected credentials before it
+     merges. Not general code review -> code-reviewer." -->
 
 <!-- model: sonnet
      Optional. Aliases: sonnet, opus, haiku, fable. Or full model ID.
@@ -58,6 +64,11 @@ FILL IN: System prompt body. Write as a direct role instruction.
 
 You are a FILL IN: role description. When invoked, FILL IN: primary action.
 
+<!-- Delegate, don't restate. If an installed skill already owns a procedure this agent
+     needs, name it ("invoke `git-commits`") instead of transcribing it — a body that
+     restates a procedure an invocable skill owns is an agent-audit FAIL. One job per
+     agent. Delete this comment before shipping. -->
+
 ## Inputs
 
 FILL IN: What inputs does this agent expect? (files, context, parameters)

plugins/kyberforge/skills/agent-author/assets/templates/claude-code.md

@@ -7,12 +7,17 @@ name: AGENT_NAME
 <!-- Required. Lowercase letters and hyphens only. Must be unique within the scope.
      Duplicate names are silently discarded — no warning is emitted. -->
 
-description: FILL IN: Action-first description of what this agent does and when to invoke it.
-<!-- Required. The primary signal for autonomous delegation.
-     Start with a verb: "Reviews...", "Analyzes...", "Generates..."
-     Include "Use proactively" to trigger automatic invocation.
-     Be specific about the triggering condition and domain.
-     Example: "Reviews pull request diffs for security issues. Use proactively after code changes." -->
+description: FILL IN: Use when <trigger>. <One capability clause.> Not <thing> -> <name>.
+<!-- Required. The primary signal for autonomous delegation, and preloaded into every
+     session whether or not this agent is ever used. Three parts, nothing else:
+     a trigger clause opening "Use when", at most one capability clause, and a
+     boundary clause naming a real sibling skill or agent.
+     250 characters is the target, 400 the hard ceiling (ADR-0020).
+     Do not open with an action verb ("Reviews...", "Analyzes...") — that rule was
+     deleted. Add "Use proactively" only if the runtime should delegate here without
+     the user naming this agent.
+     Example: "Use when a diff needs checking for injected credentials before it
+     merges. Not general code review -> code-reviewer." -->
 
 <!-- tools: Read, Bash, Grep
      Optional. Allowlist of tool names: a comma-separated string or a YAML list.
@@ -78,6 +83,11 @@ FILL IN: System prompt body. Write as a direct role instruction.
 
 You are a FILL IN: role description. When invoked, FILL IN: primary action.
 
+<!-- Delegate, don't restate. If an installed skill already owns a procedure this agent
+     needs, name it ("invoke `git-commits`") instead of transcribing it — a body that
+     restates a procedure an invocable skill owns is an agent-audit FAIL. One job per
+     agent. Delete this comment before shipping. -->
+
 ## Inputs
 
 FILL IN: What inputs does this agent expect? (files, context, parameters)

plugins/kyberforge/skills/agent-author/assets/templates/copilot.agent.md.template

@@ -12,10 +12,16 @@
 name: AGENT_NAME
 <!-- Required. Kebab-case identifier. Home-directory version wins on name collision. -->
 
-description: FILL IN: Action-first description of what this agent does and when to invoke it.
-<!-- Required. Used by the runtime for automatic agent selection — quality matters.
-     Start with a verb: "Reviews...", "Analyzes...", "Generates..."
-     Example: "Reviews pull request diffs for security issues." -->
+description: FILL IN: Use when <trigger>. <One capability clause.> Not <thing> -> <name>.
+<!-- Required. Used by the runtime for automatic agent selection, and preloaded into
+     every session whether or not this agent is ever used. Three parts, nothing else:
+     a trigger clause opening "Use when", at most one capability clause, and a
+     boundary clause naming a real sibling skill or agent.
+     250 characters is the target, 400 the hard ceiling (ADR-0020).
+     Do not open with an action verb ("Reviews...", "Analyzes...") — that rule was deleted.
+     Keep it identical in wording to the Claude Code half of the pair.
+     Example: "Use when a diff needs checking for injected credentials before it
+     merges. Not general code review -> code-reviewer." -->
 
 <!-- tools: ["read", "search", "edit"]
      Optional. Array of tool names. Omit = all available tools. [] = no tools.
@@ -46,6 +52,11 @@ FILL IN: System prompt body. Should match the Claude Code version — the agent'
 
 You are a FILL IN: role description. When invoked, FILL IN: primary action.
 
+<!-- Delegate, don't restate. If an installed skill already owns a procedure this agent
+     needs, name it ("invoke `git-commits`") instead of transcribing it — a body that
+     restates a procedure an invocable skill owns is an agent-audit FAIL. One job per
+     agent. Delete this comment before shipping. -->
+
 ## Inputs
 
 FILL IN: What inputs does this agent expect? (files, context, parameters)