refactor(gates): source the boundary resolver into skill-size-check

Why: scripts/skill-size-check.sh embedded a byte-identical 1,061-line copy
of the ADR-0020 boundary resolver only because it was also exported
through .pre-commit-hooks.yaml, whose consumers could not reach a file
inside the plugin. 4de5b6b retired that export, so the hook now runs only
in this repo and can source factory-audit's lib-boundary-resolver.sh like
validate.sh does. One copy removes the edit-one-paste-the-other hazard.

Implementation Notes:
- The hook's Python program is assembled from its own preamble, the
  library's resolver and its own checks, read from quoted here-docs. The
  assembled program matches the old one line for line except one comment,
  and the hook's stdout, stderr and exit code are identical over every
  corpus SKILL.md and the 26 differential-suite fixtures.
- The hook fails closed, naming the library, when it is missing or
  defines no resolver.
- test-adr0020-contract.sh assertion 1 now pins the single copy: one
  marker pair in the library, none in the hook, fail-closed on a missing
  or gutted library, and a sentinel planted in a copied library that must
  appear in the hook's output. 1a expects exactly one authority. 27 -> 29
  passes.
- ADR-0020 and ADR-0025 carry dated amendments; gates.md and the
  library, hook and mode-library comments no longer describe two copies.
- factory-audit is new on this branch, so the version-bump gate exempts
  it; kyberforge is already at 2.0.0 against main's 1.6.2.

Co-Authored-By: Claude Opus 5 (1M context) <noreply@anthropic.com>

tests/test-adr0020-frontmatter.sh

@@ -1,8 +1,8 @@
 #!/usr/bin/env bash
 # Regression test for the two ways an ADR-0020 gate can be made to check NOTHING
 # while still exiting 0. Both were live defects, both were silent, and both sit
-# in the shared resolver block that all three scripts embed verbatim — so every
-# case below runs against all three.
+# in the shared resolver block that all three entry points run — one sourced
+# copy since 2026-09-16 — so every case below runs against all three.
 #
 #   1. THE FRONTMATTER BLOCKER. The frontmatter matcher used to be `^---\n`. A
 #      UTF-8 BOM, a leading blank line, a trailing space after either marker, or