fix(gates): close the /name fail-open and stop the path guard inventing targets

Two defects in the routing-target resolver, both latent in the corpus but hot for
anything written next.

The free-standing `/name` sweep sat inside `if boundary:`, so route notation in a
sentence carrying no boundary marker was never extracted at all — not an ERROR, not
a SUGGESTION, not an INFO. That contradicted ADR-0020's amendment and gates.md,
which both promise `/name` blocks unconditionally. The sweep now runs over every
sentence. `-> name` and backticked forms stay gated deliberately: an arrow also
writes a process chain and a code span cites tools, files and skills alike, so
ungating either fires on ordinary prose.

The path guard used `\b`, which still holds after a hyphen, so the engine
backtracked to a shorter hyphen-terminated prefix whenever the lookahead rejected
the full segment. `/api-docs/v2.md` in a boundary clause raised blocking ERRORs for
'api' and 'api-docs' — names no author wrote, with no corroboration escape.
`(?![\w-])` forbids the shortened prefix outright; MARKED_TARGET, which had no
trailing guard at all, gained one.

Zero arguments now exits 2 rather than 0, so a mis-scoped `files:` pattern is no
longer indistinguishable from a clean corpus. Both hook manifests pass filenames
and pre-commit skips a filename-passing hook when nothing matches, so the hook
never sees an empty argv — that contract is now asserted by a test rather than
left in prose.

Deleting the sweep entirely used to leave every suite green. It now kills eight
assertions. The suite also gains its first slash-path and URL fixtures, in both
directions.

Refs: #107, #110, #124
ADR: 0020

plugins/kyberforge/.apm/skills/agent-audit/tests/validate.bats

@@ -943,3 +943,23 @@ EOF
     refute_output --partial "Traceback"
     refute_output --partial "FileNotFoundError"
 }
+
+# ---------------------------------------------------------------------------
+# Encoding, write side: sys.stdout/stderr.reconfigure(encoding='utf-8')
+#
+# read_text() in the shared resolver block pins the READS to UTF-8. That moved
+# the LC_ALL=C crash to the WRITE: this script's own message text carries em
+# dashes (the ADR-0020 boundary SUGGESTION is one), so the streams' ASCII
+# default raised UnicodeEncodeError while PRINTING — after every check had
+# already run. Here it also flipped a clean exit 0 into a traceback and exit 1.
+# ---------------------------------------------------------------------------
+
+@test "under LC_ALL=C the report is printed, not lost to a UnicodeEncodeError" {
+    local root="$TMPDIR/locale-pkg"
+    make_apm_agent "$root" "locale-agent"
+    run env LC_ALL=C PYTHONUTF8=0 bash "$SCRIPT" "$root/.apm/agents/locale-agent.agent.md"
+    assert_success
+    assert_output --partial "description has no boundary clause"
+    refute_output --partial "UnicodeEncodeError"
+    refute_output --partial "Traceback"
+}