fix(kyberforge): resolve PR #144 review and audit round 3

- factory-audit: hook events judged per deployed target after apm's
  rename (Claude/Copilot event sets FAIL, others SUGGESTION); Claude
  plugin layouts accepted as hook sources; interpreter options and
  sh -c strings checked; bats 378 -> 386
- primitive-author: Must 4/5 match the audit; reference hand-back
  points at the right steps; Step 4.2 --target all fallback
- skill-author: new-skill.sh repair only on the template marker line,
  so complete skills stay a no-op; provenance and calibration text
- forge: restore "already named" qualifier; drop false HITL claim
- apm-workflow: token example uses an env var
- docs/hooks.md: the apm-hooks.json sidecar is committed, not ignored

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KkT7RSDwDbmrM9T34b6sTi

plugins/kyberforge/.apm/skills/factory-audit/scripts/validate.sh

@@ -131,8 +131,9 @@ the target:
               directory is named 'agents' (.apm/agents, .claude/agents,
               .github/agents, .copilot/agents).
   hook mode         the target is a *.json file directly under a hooks/
-                    directory (.apm/hooks, or a hooks/ beside apm.yml; any
-                    other hooks/ directory is apm's deployed output and FAILs).
+                    directory (.apm/hooks, or a hooks/ at a package root: beside
+                    apm.yml or a plugin.json manifest; any other hooks/
+                    directory is apm's deployed output and FAILs).
   instruction mode  the target is a *.instructions.md file.
   prompt mode       the target is a *.prompt.md file.