fix(kyberforge): resolve PR #144 review and audit round 1

- factory-audit: no-op hooks, ./ after interpreters, split-quote and
  spaced ${PLUGIN_ROOT} paths, camelCase events in Claude-targeted flat
  files, case-insensitive routing stems, and non-string YAML keys are
  now caught; input: forms and prompt boundary clauses align with
  primitive-author; bats 347 -> 367
- primitive-author: routing forms, quoting guidance, install exit on
  hidden Unicode, argument-hint exception
- forge: drop duplicated gotcha, fit description and body budgets (#143)
- skill-author: primitive-author boundary, Claude-only env vars
- hook: exit unless CLAUDE_PROJECT_DIR is set, so Copilot/Codex never
  run apm update; ADR-0019 correction, ADR-0025 amendment, docs fixes

Co-Authored-By: Claude Opus 5.5 (1M context) <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01KkT7RSDwDbmrM9T34b6sTi

docs/adr/0019-session-start-hook-keeps-the-apm-install-current.md

@@ -261,6 +261,20 @@ no hook at all, for the reasons already documented in `plugins/kyberforge/docs/h
 > need a separate package declaring `target: claude` — the seventh-plugin alternative below, still
 > rejected as disproportionate — because per-file routing (`claude-hooks.json`) is deprecated and
 > narrowing kyberforge's own `targets:` would drop its skills from Copilot and Codex.
+>
+> *The "inert" rationale for the reach is superseded by the correction below.*
+
+> **Correction (2026-09-28) — the lockfile guard never made the hook inert under Copilot or Codex;
+> a `CLAUDE_PROJECT_DIR` guard now does.** The hook only reaches a project through `apm install`,
+> which writes `apm.lock.yaml`, so in every project that receives it the lockfile guard passes. The
+> script then fell back to `$PWD` for its project directory and ran `apm outdated`, and
+> `apm update --yes` when anything was stale — a lock rewrite and full redeploy on a Copilot or Codex
+> session start, with no `reloadSkills` or advice that harness understands. The hook is now Claude
+> Code only: `check-apm-current.sh` opens with `[[ -n "${CLAUDE_PROJECT_DIR:-}" ]] || exit 0`, the
+> cwd fallback is gone, and `tests/test-apm-current-hook.sh` pins that an unset or empty
+> `CLAUDE_PROJECT_DIR` exits 0 silently without invoking `apm`. apm still deploys the hook to
+> Copilot and Codex; it exits immediately there. The acceptance stands on that guard, not on the
+> lockfile. The seventh-plugin alternative below remains rejected, now for the same reason.
 
 **`scripts/git-hooks/` is now empty.** `post-push` and `test-post-push.sh` are deleted.
 `install.sh`'s copy block is generic and is kept; `test-git-hooks-install.sh` now synthesizes its