fix(kyberforge): resolve PR #144 review and audit round 3

- factory-audit: hook events judged per deployed target after apm's
  rename (Claude/Copilot event sets FAIL, others SUGGESTION); Claude
  plugin layouts accepted as hook sources; interpreter options and
  sh -c strings checked; bats 378 -> 386
- primitive-author: Must 4/5 match the audit; reference hand-back
  points at the right steps; Step 4.2 --target all fallback
- skill-author: new-skill.sh repair only on the template marker line,
  so complete skills stay a no-op; provenance and calibration text
- forge: restore "already named" qualifier; drop false HITL claim
- apm-workflow: token example uses an env var
- docs/hooks.md: the apm-hooks.json sidecar is committed, not ignored

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KkT7RSDwDbmrM9T34b6sTi

plugins/kyberforge/.apm/skills/forge/SKILL.md

@@ -1,11 +1,10 @@
 ---
 name: forge
 description: >
-  Use when the user wants to build or improve something but has not named its
-  type ("skill or plugin?"). Not a skill -> skill-author.
-  Not an agent -> agent-author.
-  Not a hook, instruction or prompt -> primitive-author.
-  Not a plugin -> apm-workflow.
+  Use when the user wants something built or improved but has not yet named
+  its type ("skill or plugin?"). If named, use instead: skill -> `skill-author`,
+  agent -> `agent-author`, hook/instruction/prompt -> `primitive-author`,
+  plugin -> `apm-workflow`.
 metadata:
   version: "1.0.2"
   category: factory

plugins/kyberforge/.apm/skills/forge/references/apm-routes.md

@@ -15,9 +15,9 @@ removed per ADR-0015 once issue #90 landed, and `apm-workflow` is their sole suc
 ## Always inline, never forked
 
 Run these routes inline, in the current conversation. Their flows are short, prompt-heavy or
-gated — `apm-workflow`'s publish and release steps take a HITL gate, and removing a marketplace
-entry takes a conversational confirmation — and a backgrounded fork cannot surface those
-checkpoints to the user in real time.
+gated — `apm publish` is not trivially reversible and removing a marketplace entry takes a
+conversational confirmation — and a backgrounded fork cannot surface those checkpoints to the
+user in real time.
 
 ## No clean-context recheck, and no automatic audit