fix(gates): close the /name fail-open and stop the path guard inventing targets

Two defects in the routing-target resolver, both latent in the corpus but hot for
anything written next.

The free-standing `/name` sweep sat inside `if boundary:`, so route notation in a
sentence carrying no boundary marker was never extracted at all — not an ERROR, not
a SUGGESTION, not an INFO. That contradicted ADR-0020's amendment and gates.md,
which both promise `/name` blocks unconditionally. The sweep now runs over every
sentence. `-> name` and backticked forms stay gated deliberately: an arrow also
writes a process chain and a code span cites tools, files and skills alike, so
ungating either fires on ordinary prose.

The path guard used `\b`, which still holds after a hyphen, so the engine
backtracked to a shorter hyphen-terminated prefix whenever the lookahead rejected
the full segment. `/api-docs/v2.md` in a boundary clause raised blocking ERRORs for
'api' and 'api-docs' — names no author wrote, with no corroboration escape.
`(?![\w-])` forbids the shortened prefix outright; MARKED_TARGET, which had no
trailing guard at all, gained one.

Zero arguments now exits 2 rather than 0, so a mis-scoped `files:` pattern is no
longer indistinguishable from a clean corpus. Both hook manifests pass filenames
and pre-commit skips a filename-passing hook when nothing matches, so the hook
never sees an empty argv — that contract is now asserted by a test rather than
left in prose.

Deleting the sweep entirely used to leave every suite green. It now kills eight
assertions. The suite also gains its first slash-path and URL fixtures, in both
directions.

Refs: #107, #110, #124
ADR: 0020

plugins/kyberforge/.apm/skills/skill-audit/tests/validate.bats

@@ -743,3 +743,33 @@ make_hand_invoked_skill() {
     refute_output --partial "has no boundary clause"
     assert_output --partial "no target could be read"
 }
+
+# ---------------------------------------------------------------------------
+# Encoding, write side: sys.stdout/stderr.reconfigure(encoding='utf-8')
+#
+# read_text() in the shared resolver block pins the READS to UTF-8. That moved
+# the LC_ALL=C crash to the WRITE: this script's own message text carries em
+# dashes (the ADR-0020 boundary SUGGESTION is one), so the streams' ASCII
+# default raised UnicodeEncodeError while PRINTING — after every check had
+# already run, losing the whole report at the last step.
+# ---------------------------------------------------------------------------
+
+@test "under LC_ALL=C the report is printed, not lost to a UnicodeEncodeError" {
+    local dir="$TMPDIR/locale-skill"
+    mkdir -p "$dir"
+    cat > "$dir/SKILL.md" <<EOF
+---
+name: locale-skill
+description: A valid skill description that is well within the limit.
+---
+
+## Step 1
+
+Do the thing.
+EOF
+    run env LC_ALL=C PYTHONUTF8=0 bash "$SCRIPT" "$dir"
+    assert_success
+    assert_output --partial "description has no boundary clause"
+    refute_output --partial "UnicodeEncodeError"
+    refute_output --partial "Traceback"
+}