feat(kyberforge): execute plugin-to-apm marketplace conversion

Why:
ADR-0015 established that Microsoft APM (apm.yml + .apm/) should replace
this repo's hand-authored plugin.json/marketplace.json model, with those
files becoming compiled output of `apm pack` instead of files edited by
hand via the (now-retired) plugin-author/marketplace-author skills.
Issue #90 was the deferred execution of that decision, gated on #88
(apm tooling) and #89 (apm-native agent-author/skill-author routing).

Implementation notes:
- All six plugins (bin, core, git, gitea, kyberforge, lint) now carry
  apm.yml + .apm/{skills,agents,hooks} as their authoring source. Skills
  moved with a plain git mv (content-identical across targets). Agents
  were re-authored, not moved: per ADR-0016, .apm/agents/*.agent.md
  compiles verbatim to both Claude and Copilot, so plugin-scope agents
  now carry only name/description/model/source_keys -- no tools: field,
  no Claude-only knobs (isolation, maxTurns, effort, memory,
  permissionMode).
- Root apm.yml registers all 7 marketplace packages (6 local plus
  mattpocock-skills as a remote entry) under versioning: per_package,
  matching this repo's existing independent-plugin-versioning practice.
- .claude-plugin/marketplace.json and every plugin's plugin.json are now
  apm-pack-compiled output, verified against the prior hand-maintained
  content: same names/descriptions/versions/licenses/authors, only
  cosmetic serialization differences (JSON key order, owner email vs.
  url, Unicode escaping).
- plugin-author and marketplace-author are retired now that apm-based
  authoring fully replaces their job; kyberforge bumped 1.3.1 -> 1.4.0
  for that removal, and the root marketplace catalog bumped
  0.3.1 -> 0.3.2 to match, per the version-bump convention now
  documented in apm-workflow's reference docs instead of a dedicated
  script (apm has no native version-bump automation).
- Fixed hardcoded pre-.apm/ path assumptions across
  .pre-commit-config.yaml, .pre-commit-hooks.yaml,
  scripts/check-scope-walkup-sync.sh, scripts/sync-vale-styles.sh,
  scripts/check-vale-style-sync.sh, six plugins' root plugin.json
  (stale skills/hooks/agents pointer fields that check-manifests.sh
  validates), and several tests/*.bats and tests/*.sh fixtures --
  including a bats REPO_ROOT relative-path depth bug (10 files, one
  extra .apm/ directory level to walk up) and a vale probe-path
  isolation regression introduced mid-fix.
- Corrected empirically-wrong assumptions surfaced this session in
  apm-workflow/apm-install's own reference docs: `apm marketplace
  package add` does not accept local paths (only owner/repo remote
  shorthand -- local packages are registered by editing apm.yml's
  marketplace.packages[] directly); `apm compile` is a consumer-side
  AGENTS.md/CLAUDE.md generator, not the plugin.json producer, and
  hard-fails on skill/agent-only packages without --clean; `apm plugin
  init <name>` nests a stray subdirectory when run with a positional
  name arg from inside a same-named directory; no native Copilot
  marketplace output profile exists; .mcp.json is merged into the
  compiled plugin.json content-aware and target-scoped, with no
  dependencies.mcp entry needed for simple passthrough; pipx is the
  correct pip fallback on externally-managed Python environments.
- Renamed agent-author's copilot.agent.md template asset to
  copilot.agent.md.template so apm compile's recursive *.agent.md glob
  stops misparsing the placeholder template as a real agent primitive.

Impact:
plugin.json and marketplace.json are compiled artifacts from here on --
editing them by hand is no longer the workflow; edit apm.yml/.apm/ and
run apm pack. CONTEXT.md's Plugin/Plugin marketplace glossary entries
reflect this. ADR-0001 is marked superseded, ADR-0006 moot, and
ADR-0010 updated for the new .apm/agents/ path (project/user scope
unaffected, per ADR-0016). Full local verification: claude plugin
validate --strict on all 6 plugins, apm audit --ci, apm marketplace
check, check-manifests.sh, and the full test suite (165/165 bats,
13/13 shell scripts) all pass clean.

Fixes: #90
Refs: #88, #89
ADR: 0015
ADR: 0016

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01Ub96PyaSRD9BHPktotj1pC

plugins/kyberforge/skills/agent-author/references/README.md

@@ -1,17 +0,0 @@
----
-source_keys: []
----
-
-# references/
-
-## deployment-modes.md
-
-Agent scope hierarchy, precedence rules, and per-scope restrictions. Covers: which fields are silently ignored for plugin agents (Claude Code and Copilot CLI), scoped identifiers for plugin subdirectory agents, cache isolation behaviour, and Copilot CLI path conventions. Loaded conditionally from SKILL.md when the destination is a plugin directory.
-
-## scripts.md
-
-Conventions for the `new-agent.sh` scaffold script and any future scripts added to this skill. Covers: what scripts should and should not do, file placement, error handling, template variable conventions, and the no-interactive-prompts rule.
-
-## sources.md
-
-Research provenance record for this skill. Lists the upstream research sources (claude-code-plugins and github-copilot-plugins research docs) that informed SKILL.md, the templates, and the deployment-modes reference. Used by `skill-audit` to validate the provenance chain.

plugins/kyberforge/skills/agent-author/references/deployment-modes.md

@@ -1,57 +0,0 @@
----
-source_keys:
-  - context7-websites-code-claude
-  - claude-code-plugins-docs
-  - claude-code-subagents-docs
-  - context7-github-en-copilot
-  - github-custom-agents-configuration
-  - github-cli-plugin-reference
----
-
-# Agent Deployment Modes
-
-Agent definitions deploy at three scopes and behave differently at each. The scope determines which fields are honoured, where files must live, and what identifiers users invoke.
-
-## Scope hierarchy and precedence
-
-| Scope | Claude Code path | Copilot CLI path | Who it affects |
-|---|---|---|---|
-| User | `~/.claude/agents/` | `~/.copilot/agents/` | All sessions for this user |
-| Project | `.claude/agents/` | `.github/agents/` or `.copilot/agents/` | This repo only |
-| Plugin/APM | `<package-root>/.apm/agents/<name>.agent.md` — single vendor-neutral file, `apm compile` emits it to both targets | *(same file)* | Sessions with the plugin/package installed |
-
-When the same agent `name` appears at multiple scopes, **user scope wins over project scope wins over plugin scope** in Claude Code. In Copilot CLI, repo-level agents override enterprise and org-level; home-directory (user) agents override repo-level on name collision.
-
-## Plugin scope restrictions
-
-Plugin/APM agents (`.apm/agents/<name>.agent.md`) carry only `name`, `description`, optionally `model`, and optionally `source_keys` (provenance metadata, not a runtime field — silently ignored by both harnesses) in frontmatter — full stop (see ADR-0016). `apm compile` copies this frontmatter verbatim to both the Claude Code and Copilot CLI compile targets with no per-target integrator: Claude's `tools:` (space-separated string) and Copilot's `tools:` (alias list) are incompatible vocabularies, and Claude-only fields have no Copilot equivalent, so any harness-specific value is guaranteed wrong on at least one target.
-
-This makes the old "silently ignored at plugin scope" framing moot. It's not that `hooks`, `mcpServers`, `permissionMode`, `tools`, `isolation`, `maxTurns`, `effort`, `memory`, `disallowedTools`, `skills`, `color`, `initialPrompt`, or `background` are merely ignored at this scope — they are never written to the file at all. Copy the agent to `.claude/agents/` (project scope) or `~/.claude/agents/` (user scope) to use any of them.
-
-## Scoped identifiers (Claude Code plugin agents only)
-
-Plugin agents in **subdirectories** get compound identifiers:
-
-```
-plugins/my-plugin/agents/review/security.md  →  my-plugin:review:security
-```
-
-Users must invoke with `@agent-my-plugin:review:security`. **Keep agents flat in `agents/` to avoid this** — subdirectory nesting is rarely worth the UX cost.
-
-At project and user scope, subdirectory path does not affect the agent's name.
-
-## Cache isolation
-
-When a plugin is installed, its directory is copied to a cache. **Any path that leaves the agent's plugin directory breaks post-install.** Agent definition files must be self-contained — they cannot reference scripts, templates, or shared files outside the plugin.
-
-Agents at project or user scope are read directly from disk; cache isolation does not apply.
-
-## Copilot CLI path conventions
-
-| Scope | Expected path | Notes |
-|---|---|---|
-| User | `~/.copilot/agents/<name>.agent.md` | Home directory |
-| Project | `.github/agents/<name>.agent.md` | Standard; also `.copilot/agents/` |
-| Plugin/APM | `<package-root>/.apm/agents/<name>.agent.md` | Not a Copilot-only file — this is the single vendor-neutral source `apm compile` reads for the Copilot CLI target |
-
-The `.agent.md` extension is **mandatory** for real Copilot CLI files (project/user scope) — Copilot CLI does not pick up plain `.md` files in the `agents/` directory. The plugin/APM source file also uses `.agent.md` by convention, since it compiles to Copilot CLI too, but it is not itself a Copilot file.

plugins/kyberforge/skills/agent-author/references/scripts.md

@@ -1,42 +0,0 @@
----
-source_keys: []
----
-
-# Scripts Reference
-
-Conventions for `scripts/new-agent.sh` and any future scripts in this skill.
-
-## Contract
-
-All scripts in this skill must follow these rules:
-
-- **No interactive prompts** — agents run non-interactive; blocking on TTY input hangs indefinitely. Accept all input via positional arguments, flags, or environment variables.
-- **Structured output** — file paths and status messages to stderr; nothing to stdout unless a downstream tool needs to consume it.
-- **Idempotent** — "create if not exists" per file. The scaffold script skips any file that already exists; agents may safely re-run it.
-- **Meaningful exit codes** — `0` success, `1` invalid arguments or precondition failure. Document in `--help`.
-- **Self-contained** — no external package installs at runtime. The script uses only bash builtins and POSIX tools (`sed`, `mkdir`, `cat`).
-
-## Template variables
-
-The scaffold script uses `sed "s/AGENT_NAME/$AGENT_NAME/g"` to substitute the agent name into templates. Template files must use `AGENT_NAME` (all caps, no delimiters) as the substitution token.
-
-Do not add additional substitution tokens unless you update both the template files and the script in the same edit pass.
-
-## File placement
-
-The script creates files at paths determined by scope detection (plugin/APM / project / user). Scope is resolved by walking up from the root directory: a `type:`-bearing `apm.yml` at or above the root marks the package root (plugin/APM scope, single file); an `apm.yml` without a `type:` field is a marketplace-only manifest and is skipped, the walk continues upward. If no such `apm.yml` is found, the root resolving to exactly `$HOME` is user scope; anything else is project scope. If scope detection logic changes, update the `new-agent.sh` usage comment and `SKILL.md` Step 1 scope detection description in the same pass.
-
-## Error messages
-
-On failure, state: what went wrong, what was expected, what to try. Example:
-```
-Error: agent-name must use lowercase letters, numbers, and hyphens only.
-       No leading, trailing, or consecutive hyphens.
-       Received: 'My_Agent'
-```
-
-Vague errors leave agents unable to self-correct.
-
-## --help output
-
-Keep `--help` concise — it may enter the agent's context window. Include: usage line, argument descriptions with scope detection table, exit codes. Omit prose explanations.

plugins/kyberforge/skills/agent-author/references/sources.md

@@ -1,95 +0,0 @@
----
-source_keys:
-  - context7-websites-code-claude
-  - claude-code-plugins-docs
-  - claude-code-subagents-docs
-  - context7-github-en-copilot
-  - github-custom-agents-configuration
-  - github-cli-plugin-reference
-  - github-plugins-creating
-  - github-plugins-finding-installing
-  - github-plugins-marketplace
-  - github-sdk-custom-agents
----
-
-# Sources
-
-## context7-websites-code-claude
-
-- **URL:** context7:/websites/code_claude
-- **Research doc:** plugins/kyberforge/docs/research/docs/claude-code-plugins/sources.md
-- **Description:** Official Claude Code documentation site indexed by Context7 — plugin manifest schema, subagent definition types, marketplace JSON format, agent markdown file format
-- **Contributing files:** SKILL.md, references/deployment-modes.md
-- **Status:** `extracted`
-
-## claude-code-plugins-docs
-
-- **URL:** https://code.claude.com/docs/en/plugins
-- **Research doc:** plugins/kyberforge/docs/research/docs/claude-code-plugins/sources.md
-- **Description:** Official Claude Code plugin authoring guide — plugin structure, manifest fields, loading methods, skill namespacing, agent activation, marketplace submission
-- **Contributing files:** SKILL.md, references/deployment-modes.md
-- **Status:** `extracted`
-
-## claude-code-subagents-docs
-
-- **URL:** https://code.claude.com/docs/en/sub-agents
-- **Research doc:** plugins/kyberforge/docs/research/docs/claude-code-plugins/sources.md
-- **Description:** Official Claude Code subagent reference — definition format, all frontmatter fields, scope priority, built-in agents, CLI flags, environment variables, known limitations
-- **Contributing files:** SKILL.md, references/deployment-modes.md
-- **Status:** `extracted`
-
-## context7-github-en-copilot
-
-- **URL:** context7:/websites/github_en_copilot
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** Official GitHub Copilot documentation indexed by Context7; covers CLI plugins, custom agents, SDK, and marketplace
-- **Contributing files:** SKILL.md, references/deployment-modes.md
-- **Status:** `extracted`
-
-## github-custom-agents-configuration
-
-- **URL:** https://docs.github.com/en/copilot/reference/custom-agents-configuration
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** Reference for cloud and IDE custom agent definition format — frontmatter fields, tool aliases, MCP server config, secrets interpolation, scoping hierarchy
-- **Contributing files:** SKILL.md, references/deployment-modes.md
-- **Status:** `extracted`
-
-## github-cli-plugin-reference
-
-- **URL:** https://docs.github.com/en/copilot/reference/copilot-cli-reference/cli-plugin-reference
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** Full CLI plugin reference — plugin.json schema, marketplace.json schema, all CLI commands and flags, install specification formats, loading precedence, env vars, LSP config
-- **Contributing files:** SKILL.md, references/deployment-modes.md
-- **Status:** `extracted`
-
-## github-plugins-creating
-
-- **URL:** https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/plugins-creating
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** How-to for creating Copilot CLI plugins — plugin structure, agent and skill authoring, hooks format, MCP config, development lifecycle
-- **Contributing files:** SKILL.md
-- **Status:** `extracted`
-
-## github-plugins-finding-installing
-
-- **URL:** https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/plugins-finding-installing
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** User-facing guide to discovering and installing CLI plugins — marketplace browsing commands, install/update/uninstall workflow
-- **Contributing files:** (none)
-- **Status:** `extracted`
-
-## github-plugins-marketplace
-
-- **URL:** https://docs.github.com/en/copilot/how-tos/copilot-cli/customize-copilot/plugins-marketplace
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** How-to for creating and publishing a plugin marketplace — marketplace.json structure, hosting options, registration commands
-- **Contributing files:** (none)
-- **Status:** `extracted`
-
-## github-sdk-custom-agents
-
-- **URL:** https://docs.github.com/en/copilot/how-tos/copilot-sdk/features/custom-agents
-- **Research doc:** plugins/kyberforge/docs/research/docs/github-copilot-plugins/sources.md
-- **Description:** SDK custom agent API — CustomAgentConfig fields in all five languages, session config, sub-agent lifecycle events, tool scoping, permission handling
-- **Contributing files:** (none)
-- **Status:** `extracted`