Publish portable Apollo skills 0.3.0

[SamuelTElliott]

Summary

• establish skills/ and catalog/skills.yaml as the canonical public source for five portable Apollo skills
• add client-neutral onboarding plus Claude, Cursor, Codex, Copilot, and generic package builds
• add a consent-based installer and versioned read-only recommend_apollo_skills contract
• keep Replit-specific onboarding and visitor workflows out of every public output

Safety

• installation requires explicit confirmation (--yes is an intentional override)
• recommendation returns at most three deterministic public skills and never installs or calls Apollo
• generic onboarding excludes Replit, app-builder, API-key, and secrets-store guidance

Focused verification

• CI=true pnpm check (13/13 tests)
• git diff --check
• independent second-pass review: no blocker/high findings

Follow-up

The Leadgenie draft PR consumes this contract and pins its catalog snapshot to commit fbc9f28419a5fc23cc4ff531fee48acfa8066a1d.

[SamuelTElliott]

@alexander-rykhlitskiap This is the draft public-skill PR for your engineering review. GitHub rejected the formal reviewer-assignment API with a 403, so I am tagging you here instead. The paired Leadgenie and private handoff PRs will reference this contract and commit.

[kodem-security]

Kodem Security Scan Summary

Status	Check	Issues by Severity	Link
✅ Passed	Code Weakness Security Report	🟧 M: 2	Link to Check

Note: Kai marked all findings as likely false positives.

[orca-security-us]

Orca Security Scan Summary

Status	Check	Issues by priority
Passed	Infrastructure as Code	0   0   0   0	View in Orca
Passed	Secrets	0   0   0   0	View in Orca
Passed	Vulnerabilities	0   0   0   0	View in Orca

[SamuelTElliott]

Closing as superseded by #9. The portable 0.3.0 draft added installers, packages, public evals, workflows, contracts, and lockfiles that were intentionally removed from the current lean public-repository scope. PR #9 is the canonical public-skills draft for review.