feat(kyberforge): execute plugin-to-apm marketplace conversion

Why:
ADR-0015 established that Microsoft APM (apm.yml + .apm/) should replace
this repo's hand-authored plugin.json/marketplace.json model, with those
files becoming compiled output of `apm pack` instead of files edited by
hand via the (now-retired) plugin-author/marketplace-author skills.
Issue #90 was the deferred execution of that decision, gated on #88
(apm tooling) and #89 (apm-native agent-author/skill-author routing).

Implementation notes:
- All six plugins (bin, core, git, gitea, kyberforge, lint) now carry
  apm.yml + .apm/{skills,agents,hooks} as their authoring source. Skills
  moved with a plain git mv (content-identical across targets). Agents
  were re-authored, not moved: per ADR-0016, .apm/agents/*.agent.md
  compiles verbatim to both Claude and Copilot, so plugin-scope agents
  now carry only name/description/model/source_keys -- no tools: field,
  no Claude-only knobs (isolation, maxTurns, effort, memory,
  permissionMode).
- Root apm.yml registers all 7 marketplace packages (6 local plus
  mattpocock-skills as a remote entry) under versioning: per_package,
  matching this repo's existing independent-plugin-versioning practice.
- .claude-plugin/marketplace.json and every plugin's plugin.json are now
  apm-pack-compiled output, verified against the prior hand-maintained
  content: same names/descriptions/versions/licenses/authors, only
  cosmetic serialization differences (JSON key order, owner email vs.
  url, Unicode escaping).
- plugin-author and marketplace-author are retired now that apm-based
  authoring fully replaces their job; kyberforge bumped 1.3.1 -> 1.4.0
  for that removal, and the root marketplace catalog bumped
  0.3.1 -> 0.3.2 to match, per the version-bump convention now
  documented in apm-workflow's reference docs instead of a dedicated
  script (apm has no native version-bump automation).
- Fixed hardcoded pre-.apm/ path assumptions across
  .pre-commit-config.yaml, .pre-commit-hooks.yaml,
  scripts/check-scope-walkup-sync.sh, scripts/sync-vale-styles.sh,
  scripts/check-vale-style-sync.sh, six plugins' root plugin.json
  (stale skills/hooks/agents pointer fields that check-manifests.sh
  validates), and several tests/*.bats and tests/*.sh fixtures --
  including a bats REPO_ROOT relative-path depth bug (10 files, one
  extra .apm/ directory level to walk up) and a vale probe-path
  isolation regression introduced mid-fix.
- Corrected empirically-wrong assumptions surfaced this session in
  apm-workflow/apm-install's own reference docs: `apm marketplace
  package add` does not accept local paths (only owner/repo remote
  shorthand -- local packages are registered by editing apm.yml's
  marketplace.packages[] directly); `apm compile` is a consumer-side
  AGENTS.md/CLAUDE.md generator, not the plugin.json producer, and
  hard-fails on skill/agent-only packages without --clean; `apm plugin
  init <name>` nests a stray subdirectory when run with a positional
  name arg from inside a same-named directory; no native Copilot
  marketplace output profile exists; .mcp.json is merged into the
  compiled plugin.json content-aware and target-scoped, with no
  dependencies.mcp entry needed for simple passthrough; pipx is the
  correct pip fallback on externally-managed Python environments.
- Renamed agent-author's copilot.agent.md template asset to
  copilot.agent.md.template so apm compile's recursive *.agent.md glob
  stops misparsing the placeholder template as a real agent primitive.

Impact:
plugin.json and marketplace.json are compiled artifacts from here on --
editing them by hand is no longer the workflow; edit apm.yml/.apm/ and
run apm pack. CONTEXT.md's Plugin/Plugin marketplace glossary entries
reflect this. ADR-0001 is marked superseded, ADR-0006 moot, and
ADR-0010 updated for the new .apm/agents/ path (project/user scope
unaffected, per ADR-0016). Full local verification: claude plugin
validate --strict on all 6 plugins, apm audit --ci, apm marketplace
check, check-manifests.sh, and the full test suite (165/165 bats,
13/13 shell scripts) all pass clean.

Fixes: #90
Refs: #88, #89
ADR: 0015
ADR: 0016

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ub96PyaSRD9BHPktotj1pC

plugins/kyberforge/skills/agent-audit/references/README.md

@@ -1,15 +0,0 @@
----
-source_keys: []
----
-
-# references/
-
-Additional documentation agents load on demand.
-
-## Files
-
-| File | Purpose |
-|------|---------|
-| `description-quality.md` | Qualitative guide for borderline description findings — action-verb rules, specificity criteria, proactive-use caveat, length limits. |
-| `field-inventory.md` | Canonical list of valid CC and Copilot agent definition fields. Load when the script needs authoritative field lists for structural validation. |
-| `sources.md` | Research provenance records for skill content. Load only when tracing the origin of a specific rule or field constraint. |

plugins/kyberforge/skills/agent-audit/references/description-quality.md

@@ -1,49 +0,0 @@
----
-source_keys:
-  - context7-websites-code-claude
-  - claude-code-plugins-docs
-  - claude-code-subagents-docs
-  - context7-github-en-copilot
-  - github-custom-agents-configuration
----
-
-# Agent Description Quality Reference
-
-Load this file when a description finding is borderline and you need to make a precise call.
-
-## Action-verb opening
-
-The description must open with an imperative or present-tense verb that describes what the agent does ("Reviews...", "Audits...", "Generates...", "Analyzes..."). Avoid:
-- Noun phrases: "An agent that..." — no verb
-- "This agent..." or "Use this when..." — passive framing
-- "Helps with..." — too vague to be a clear verb
-
-**Borderline call:** "Validates and reviews..." is acceptable — two verbs is fine if both are specific. "Assists in reviewing..." is not — "assists" is vague filler.
-
-## Specificity of trigger condition
-
-The description must state what specifically triggers the agent. Generic phrasing fails:
-- Too vague: "when the user needs help with agents"
-- Acceptable: "when the user says 'audit this agent', 'check if my agent follows best practices', or wants to know if an agent pair is ready to ship"
-
-Include indirect triggers: "even if they don't use the word 'audit'" or "even if the user doesn't phrase it as a review request". If the agent should activate on a recognisable user goal (not just literal keyword matches), name that goal.
-
-**Borderline call:** If the description covers direct triggers but omits common indirect phrasings that a user would plausibly use, mark as SUGGESTION (not FAIL) — the agent still activates, just less reliably.
-
-## `Use proactively`
-
-For CC files: including "Use proactively" signals the CC runtime to offer the agent unprompted when conditions are met. This is CC-specific — use it when the agent should activate without an explicit user request.
-
-For Copilot files: this phrase has no effect. Use `user-invocable: false` / `disable-model-invocation: true` for equivalent Copilot behavior. Flag `Use proactively` in a Copilot description as a SUGGESTION (not FAIL) — it causes no harm, just has no effect.
-
-## Length and hard limits
-
-- CC agent descriptions: no documented character limit, but keep under 500 characters to avoid truncation in UI contexts.
-- Copilot agent descriptions: no separate documented limit, but the overall 30,000-character body limit applies to the full file.
-- Skill descriptions (SKILL.md): hard 1024-character limit enforced by the platform.
-
-## Do not use when
-
-Include a "Do not use when..." clause only if a near-miss agent or skill exists that could steal activations. Omitting it is not a finding. Including it is correct when there is a real confusion risk (e.g., `/agent-audit` vs `/skill-audit`).
-
-**Borderline call:** If the "Do not use when" clause is present but the exclusion described is already obvious from context, mark as SUGGESTION to tighten or remove — not FAIL.

plugins/kyberforge/skills/agent-audit/references/field-inventory.md

@@ -1,28 +0,0 @@
----
-source_keys:
-  - context7-websites-code-claude
-  - claude-code-plugins-docs
-  - claude-code-subagents-docs
-  - context7-github-en-copilot
-  - github-custom-agents-configuration
----
-
-## claude-code-fields
-
-name description tools disallowedTools model effort maxTurns permissionMode skills mcpServers hooks memory background isolation color initialPrompt
-
-## claude-code-only-fields
-
-maxTurns isolation memory permissionMode effort hooks mcpServers disallowedTools skills initialPrompt color background
-
-## copilot-fields
-
-name description tools target model disable-model-invocation user-invocable mcp-servers metadata
-
-## copilot-only-fields
-
-target disable-model-invocation user-invocable mcp-servers metadata
-
-## apm-agent-allowlist
-
-name description model source_keys

plugins/kyberforge/skills/agent-audit/references/sources.md

@@ -1,90 +0,0 @@
----
-source_keys:
-  - context7-websites-code-claude
-  - claude-code-plugins-docs
-  - claude-code-subagents-docs
-  - context7-github-en-copilot
-  - github-custom-agents-configuration
----
-
-# Sources
-
-## context7-websites-code-claude
-
-- **URL:** context7:/websites/code_claude
-- **Research doc:** plugins/kyberforge/docs/research/docs/claude-code-plugins/sources.md
-- **Description:** Official Claude Code documentation site indexed by Context7 — plugin manifest schema, subagent definition types, marketplace JSON format, agent markdown file format
-- **Contributing files:** SKILL.md, references/field-inventory.md, references/description-quality.md
-- **Status:** `extracted`
-
-## claude-code-plugins-docs
-
-- **URL:** https://code.claude.com/docs/en/plugins
-- **Research doc:** plugins/kyberforge/docs/research/docs/claude-code-plugins/sources.md
-- **Description:** Official Claude Code plugin authoring guide — plugin structure, manifest fields, loading methods, skill namespacing, agent activation, marketplace submission
-- **Contributing files:** SKILL.md, references/field-inventory.md, references/description-quality.md
-- **Status:** `extracted`
-
-## claude-code-subagents-docs
-
-- **URL:** https://code.claude.com/docs/en/sub-agents
-- **Research doc:** plugins/kyberforge/docs/research/docs/claude-code-plugins/sources.md
-- **Description:** Official Claude Code subagent reference — definition format, all frontmatter fields, scope priority, built-in agents, CLI flags, environment variables, known limitations
-- **Contributing files:** SKILL.md, references/field-inventory.md, references/description-quality.md
-- **Status:** `extracted`
-
-## context7-github-en-copilot
-
-- **URL:** context7:/websites/github_en_copilot
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** Official GitHub Copilot documentation indexed by Context7; covers CLI plugins, custom agents, SDK, and marketplace
-- **Contributing files:** SKILL.md, references/field-inventory.md, references/description-quality.md
-- **Status:** `extracted`
-
-## github-custom-agents-configuration
-
-- **URL:** https://docs.github.com/en/copilot/reference/custom-agents-configuration
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** Reference for cloud and IDE custom agent definition format — frontmatter fields, tool aliases, MCP server config, secrets interpolation, scoping hierarchy
-- **Contributing files:** SKILL.md, references/field-inventory.md, references/description-quality.md
-- **Status:** `extracted`
-
-## github-cli-plugin-reference
-
-- **URL:** https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-plugin-reference
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** Full CLI plugin reference — plugin.json schema, marketplace.json schema, all CLI commands and flags, install specification formats, loading precedence, env vars, LSP config
-- **Contributing files:** (none)
-- **Status:** `extracted`
-
-## github-plugins-creating
-
-- **URL:** https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/plugins-creating
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** How-to for creating Copilot CLI plugins — plugin structure, agent and skill authoring, hooks format, MCP config, development lifecycle
-- **Contributing files:** (none)
-- **Status:** `extracted`
-
-## github-plugins-finding-installing
-
-- **URL:** https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/plugins-finding-installing
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** User-facing guide to discovering and installing CLI plugins — marketplace browsing commands, install/update/uninstall workflow
-- **Contributing files:** (none)
-- **Status:** `extracted`
-
-## github-plugins-marketplace
-
-- **URL:** https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/plugins-marketplace
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** How-to for creating and publishing a plugin marketplace — marketplace.json structure, hosting options, registration commands
-- **Contributing files:** (none)
-- **Status:** `extracted`
-
-## github-sdk-custom-agents
-
-- **URL:** https://docs.github.com/en/copilot/how-tos/copilot-sdk/features/custom-agents
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** SDK custom agent API — CustomAgentConfig fields in all five languages, session config, sub-agent lifecycle events, tool scoping, permission handling
-- **Contributing files:** (none)
-- **Status:** `extracted`