refactor(kyberforge): move audit guidance out of the per-run rubric load

skill-audit loaded roughly 4,268 words of rubric on every run, most of it
criteria for findings a clean skill never triggers. The auditing guidance moves
into finding-criteria.md, read only when a finding is actually raised, cutting
a clean audit to about 999 words. The named-skill exemption is replaced with
properties, so the rubric stops carrying a list that ages the moment a skill
is renamed.

apm-workflow's `type:` trap sat in one flow while biting several, so it is
promoted to a common gate reachable from all of them; its claim to be
self-contained was untrue once it started routing to apm-install. skill-author's
contract had drifted from body-discipline.md and is realigned, and agent-audit's
field inventory is brought in line with the same split.

plugins/kyberforge/.apm/skills/apm-workflow/references/compile.md

@@ -51,7 +51,7 @@ apm publish --package acme/my-skill
 
 Publishes a producer package (root containing `apm.yml`, `.apm/`, and optionally a `registries:` block) to a registry. Always dry-run with `-v` first — publishing is not trivially reversible once a version tag is claimed on a registry.
 
-Publishing to a named registry requires `apm experimental enable registries` to have already run — see `references/configure.md`'s Gotchas for the full precondition and its silent-no-op failure mode.
+Publishing to a named registry requires `apm experimental enable registries` to have already run — see `SKILL.md`'s Gotchas for the precondition and its silent-no-op failure mode.
 
 ## Run
 

plugins/kyberforge/.apm/skills/apm-workflow/references/configure.md

@@ -35,8 +35,6 @@ version: 1.0.0
 - `registries` — named registry endpoints for shorthand dependency resolution
 - `marketplace` — owner + packages list; see `references/marketplace.md` for the full marketplace workflow
 
-See `docs/research/docs/microsoft-apm/configuration.md` for the complete annotated schema.
-
 ## Bumping a package's own version (repo policy)
 
 apm ships no version-bump command, so `version:` in a package's own `apm.yml` is a hand edit.

plugins/kyberforge/.apm/skills/apm-workflow/references/install.md

@@ -19,4 +19,4 @@ With no arguments, resolves and installs everything declared under `dependencies
 
 `--target agent-skills` generates the vendor-neutral output directory instead of a Claude/Copilot-specific one — for IDE-agnostic tool support.
 
-If a `PACKAGE_REF` resolves through a named registry rather than a plain git source, `apm experimental enable registries` must already have been run — see `references/configure.md`'s Gotchas for the full precondition and its silent-no-op failure mode.
+If a `PACKAGE_REF` resolves through a named registry rather than a plain git source, `apm experimental enable registries` must already have been run — see `SKILL.md`'s Gotchas for the precondition and its silent-no-op failure mode.