feat(gates): enforce metadata.version bumps on changed skills at pre-push

check-skill-version-bump fails a push when a skill directory changed
against its merge-base with main (tests/ excluded) without a strictly
higher metadata.version than main. New, renamed and deleted skills are
exempt; every plugin is covered. Recorded as a dated section in
ADR-0022 and documented in gates.md.

Patch-bumps the 17 skills that changed on this branch without a bump,
so the branch passes its own gate. Simplification audit finding 33.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

plugins/kyberforge/.apm/skills/apm-install/SKILL.md

@@ -6,7 +6,7 @@ description: >
   authoring, publishing, auditing, or dependency installation for an apm
   package -> `apm-workflow`.
 metadata:
-  version: "1.0.0"
+  version: "1.0.1"
   category: apm
   source_keys:
     - context7-microsoft-apm

plugins/kyberforge/.apm/skills/apm-workflow/SKILL.md

@@ -5,7 +5,7 @@ description: >
   the dependencies it declares, or an apm marketplace — even when the user does
   not say "apm". Not the apm binary or an agent runtime -> `apm-install`.
 metadata:
-  version: "1.0.0"
+  version: "1.0.1"
   category: apm
   source_keys:
     - context7-microsoft-apm