refactor(kyberforge): move audit guidance out of the per-run rubric load

skill-audit loaded roughly 4,268 words of rubric on every run, most of it
criteria for findings a clean skill never triggers. The auditing guidance moves
into finding-criteria.md, read only when a finding is actually raised, cutting
a clean audit to about 999 words. The named-skill exemption is replaced with
properties, so the rubric stops carrying a list that ages the moment a skill
is renamed.

apm-workflow's `type:` trap sat in one flow while biting several, so it is
promoted to a common gate reachable from all of them; its claim to be
self-contained was untrue once it started routing to apm-install. skill-author's
contract had drifted from body-discipline.md and is realigned, and agent-audit's
field inventory is brought in line with the same split.

plugins/kyberforge/skills/skill-audit/references/formatting-and-scripts.md

@@ -44,20 +44,5 @@ follow from that:
   undocumented one is a coin flip.
 - **`--dry-run` present for destructive operations.**
 
-## Auditing guidance
-
-Flag as FAIL if:
-
-- A script prompts interactively, in any form
-- A script exposes no `--help`
-- A destructive script has no `--dry-run`
-- Data and diagnostics share a stream, so the output cannot be piped
-- A relative path named in the body does not resolve
-- Heading levels are inconsistent enough to break the document's structure
-
-Flag as SUGGESTION if:
-
-- Exit codes are meaningful but undocumented in `--help`
-- A code block is untagged where a language applies
-- A script is idempotent in practice but does not say so, leaving a re-run's safety unclear
-- List indentation or section spacing is inconsistent without breaking the render
+The FAIL and SUGGESTION criteria for this dimension live in `references/finding-criteria.md`,
+which Step 3 loads on every run.