fix(kyberforge): broaden audit self-triggers, plug factory gaps

skill-audit/agent-audit now proactively trigger after a skill/agent
file is hand-edited outside skill-author/agent-author, not just on
explicit request — closing a gap from this session where a fork's
direct edits to agent-author/agent-audit shipped without their own
inline audit until forge was invoked to check afterward.

Also: plugin-author gains a gotcha on claude plugin validate --strict
auto-discovering every .md under agents/ regardless of manifest
declarations (ADR-0010); agent-audit's dimension count and
validate-provenance.sh's --help now match actual behavior.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>

plugins/kyberforge/skills/agent-audit/SKILL.md

@@ -4,9 +4,12 @@ description: >
   Use when the user wants to review an agent definition they wrote, says "audit this
   agent", "check if my agent follows best practices", "review my agent file", or wants
   to know if an agent pair is ready to ship — even if they don't use the word "audit".
-  Audits a Claude Code .md and Copilot .agent.md agent file pair across five dimensions:
-  structural validation, provider safety, description quality, body quality, and pair
-  consistency — plus provenance chain validation. Produces a compact findings report
+  Also invoke proactively after directly hand-editing an agent file pair outside
+  agent-author — an unaudited hand-edit is the same risk as unreviewed code.
+  Audits a Claude Code .md and Copilot .agent.md agent file pair across six dimensions:
+  structural validation, provider safety, description quality, body quality, comment
+  discipline, and pair consistency — plus provenance chain validation. Produces a
+  compact findings report
   (findings only, no PASS noise) with Why and Fix per finding. Do not use to fix agent
   files — use /agent-author instead. Do not use to audit SKILL.md files — use
   /skill-audit instead.