fix(kyberforge): apply audit findings to agent-author skill

- Fix Copilot format conflation: split CLI vs cloud/IDE in Step 3,
  clean copilot template to CLI-only fields, add body length limit (30k)
- Add missing CC fields to Step 2: disallowedTools, skills, color,
  initialPrompt, background
- Fix Gotchas: add WaitForMcpServers to unavailable tools list,
  add ExitPlanMode plan-mode carve-out
- Make 'Use proactively' conditional (was unconditional directive)
- Clarify audit invocation to 'Invoke kyberforge:agent-audit skill directly'
- Add 'Would the agent get this wrong?' heuristic to Improve Step 4
- Add agent-audit co-install prerequisite check
- Add pre-audit manual checklist to validate/close step
- Add references/scripts.md for new-agent.sh conventions
- Fix sources.md: remove template/script files from Contributing files
  (templates can't carry YAML provenance without leaking into user files),
  add 3 missing research slugs with (none) contributing files
- Add context7-github-en-copilot to deployment-modes.md source_keys
- Update README.md and references/README.md with new scripts.md entry

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_0147vXtL5sP6vorDdqXGJJU9

plugins/kyberforge/skills/agent-author/assets/templates/claude-code.md

@@ -18,7 +18,8 @@ description: FILL IN: Action-first description of what this agent does and when
 # Use Agent(type1,type2) to restrict which subagent types this agent can spawn.
 # Omit Agent entirely to prevent this agent from spawning subagents.
 # Never available to subagents regardless of tools field:
-#   AskUserQuestion, EnterPlanMode, ExitPlanMode, ScheduleWakeup
+#   AskUserQuestion, EnterPlanMode, ExitPlanMode, ScheduleWakeup, WaitForMcpServers
+# Exception: ExitPlanMode IS available when parent session runs in permissionMode: plan
 
 # model: sonnet
 # Optional. Aliases: sonnet, opus, haiku, fable. Or full model ID.
@@ -45,6 +46,19 @@ description: FILL IN: Action-first description of what this agent does and when
 # background: false
 # Optional. Set true to force background execution.
 
+# disallowedTools: mcp__filesystem__write_file
+# Optional. Space-separated denylist, applied before the tools allowlist.
+# Supports mcp__* glob patterns (e.g. mcp__filesystem__* to block all filesystem tools).
+
+# skills:
+#   - skill-name
+# Optional. Skill names preloaded into this agent's context at startup.
+# Different from the source_keys metadata field (which is provenance-only).
+
+# initialPrompt: "Start by reading the README."
+# Optional. Auto-submitted as the first turn when this agent activates as the main session thread.
+# Only set when this agent is intended for main-thread (not subagent) activation.
+
 # source_keys:
 #   - slug-name
 # Development-only. Add when research sources informed this agent (slugs must match agents/sources.md).