refactor(kyberforge): move audit guidance out of the per-run rubric load

skill-audit loaded roughly 4,268 words of rubric on every run, most of it
criteria for findings a clean skill never triggers. The auditing guidance moves
into finding-criteria.md, read only when a finding is actually raised, cutting
a clean audit to about 999 words. The named-skill exemption is replaced with
properties, so the rubric stops carrying a list that ages the moment a skill
is renamed.

apm-workflow's `type:` trap sat in one flow while biting several, so it is
promoted to a common gate reachable from all of them; its claim to be
self-contained was untrue once it started routing to apm-install. skill-author's
contract had drifted from body-discipline.md and is realigned, and agent-audit's
field inventory is brought in line with the same split.

plugins/kyberforge/skills/apm-workflow/references/configure.md

@@ -35,8 +35,6 @@ version: 1.0.0
 - `registries` — named registry endpoints for shorthand dependency resolution
 - `marketplace` — owner + packages list; see `references/marketplace.md` for the full marketplace workflow
 
-See `docs/research/docs/microsoft-apm/configuration.md` for the complete annotated schema.
-
 ## Bumping a package's own version (repo policy)
 
 apm ships no version-bump command, so `version:` in a package's own `apm.yml` is a hand edit.