fix(kyberforge): resolve PR #144 review and audit round 3

- factory-audit: hook events judged per deployed target after apm's
  rename (Claude/Copilot event sets FAIL, others SUGGESTION); Claude
  plugin layouts accepted as hook sources; interpreter options and
  sh -c strings checked; bats 378 -> 386
- primitive-author: Must 4/5 match the audit; reference hand-back
  points at the right steps; Step 4.2 --target all fallback
- skill-author: new-skill.sh repair only on the template marker line,
  so complete skills stay a no-op; provenance and calibration text
- forge: restore "already named" qualifier; drop false HITL claim
- apm-workflow: token example uses an env var
- docs/hooks.md: the apm-hooks.json sidecar is committed, not ignored

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KkT7RSDwDbmrM9T34b6sTi

plugins/kyberforge/.apm/skills/factory-audit/references/sources.md

@@ -13,6 +13,8 @@ source_keys:
   - apm-cli-installed-source
   - apm-docs-llms-full
   - adr-0029-prompt-house-rule
+  - claude-code-hooks-reference
+  - github-copilot-hooks-configuration
 ---
 
 # Sources
@@ -179,3 +181,21 @@ source_keys:
 - **Description:** The repo's prompt house rule — a prompt is a single-intent, user-triggered steering message with no procedure — and its description contract: one user-facing sentence naming the steered skills, no trigger or boundary clause
 - **Contributing files:** references/prompt-flow.md
 - **Status:** `extracted`
+
+## claude-code-hooks-reference
+
+- **URL:** https://code.claude.com/docs/en/hooks
+- **Research doc:** none
+- **Basis:** plugins/kyberforge/.apm/skills/factory-audit/scripts/lib-checks-primitive.sh (KNOWN_EVENTS, transcribed from the URL on 2026-09-28; the vendored corpus lists Claude's hook events only partially)
+- **Description:** Claude Code's hook reference — the full list of hook event names Claude fires, which `scripts/lib-checks-primitive.sh` carries as `KNOWN_EVENTS['claude']` to FAIL an event Claude never fires after apm's rename
+- **Contributing files:** references/hook-flow.md
+- **Status:** `extracted`
+
+## github-copilot-hooks-configuration
+
+- **URL:** https://docs.github.com/en/copilot/reference/hooks-configuration
+- **Research doc:** none
+- **Basis:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/configuration.md (the camelCase list; the PascalCase alternative is from the URL, 2026-09-28)
+- **Description:** GitHub Copilot's hook configuration reference — the camelCase event names Copilot fires and its PascalCase "VS Code compatible" alternative, carried as `KNOWN_EVENTS['copilot']`
+- **Contributing files:** references/hook-flow.md
+- **Status:** `extracted`