fix(kyberforge): resolve PR #144 review and audit round 3

- factory-audit: hook events judged per deployed target after apm's
  rename (Claude/Copilot event sets FAIL, others SUGGESTION); Claude
  plugin layouts accepted as hook sources; interpreter options and
  sh -c strings checked; bats 378 -> 386
- primitive-author: Must 4/5 match the audit; reference hand-back
  points at the right steps; Step 4.2 --target all fallback
- skill-author: new-skill.sh repair only on the template marker line,
  so complete skills stay a no-op; provenance and calibration text
- forge: restore "already named" qualifier; drop false HITL claim
- apm-workflow: token example uses an env var
- docs/hooks.md: the apm-hooks.json sidecar is committed, not ignored

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KkT7RSDwDbmrM9T34b6sTi

plugins/kyberforge/.apm/skills/skill-author/references/contract.md

@@ -153,9 +153,10 @@ an edit to either belongs in both.
 
 **Dispatch is mandatory at two or more mutually exclusive flows.** The body carries the dispatch
 table and the gates common to every branch; each flow gets its own self-contained `references/`
-file. Exemplar: the `apm-workflow` skill — a **294-word body** dispatching to 3,154 words of
-references across five flow files. Calibrate against 294: that file's whole-file count is 348
-words, and aiming at that number instead overshoots the body budget by ~18%. The 3,154 excludes
+file. Exemplar: the `apm-workflow` skill — a body of roughly 240 words dispatching to over
+3,000 words of references across five flow files. Calibrate against the body-only count
+`factory-audit` reports, not the whole-file count: there the whole file runs about a fifth larger,
+so aiming at it overshoots the body budget by that much. The reference total excludes
 `references/sources.md`, which is a provenance record and is never loaded at runtime.
 
 **Length.** 600 words SUGGESTION, 900 words FAIL, counting the **body only** — everything after

plugins/kyberforge/.apm/skills/skill-author/references/improve.md

@@ -85,8 +85,9 @@ Still over after all four means the skill does two jobs: split it rather than co
 
 **Re-cite what moved.** After content moves between files, update `references/sources.md`'s
 `Contributing files` for every slug whose content moved, and drop any file the edit deleted.
-`factory-audit`'s `scripts/validate-provenance.sh` exits 0 on exactly that drift, so a stale
-provenance claim ships unless you fix it here.
+`factory-audit`'s `scripts/validate-provenance.sh` fails a listed file that no longer exists, but
+exits 0 when content moved out of a file that still exists and still lists the slug, so that stale
+claim ships unless you fix it here.
 
 **Re-check every relocated gate's reachability.** A Gotcha or gate moved out of the body into one
 flow's `references/` file is invisible to every other branch, and the word counts improve either