v1.69.0.0 feat: add repo bootstrap and AI-integrity audit skills

[deepusnath]

PR title

feat: add repo bootstrap and AI-integrity audit skills

Summary

Adds two evidence-driven repository workflows:

• /noshit (No-Omissions System Health & Integrity Test) is a strictly
  read-only audit of whether AI-development instructions, safety, memory,
  tooling, verification guidance, and Git hygiene match repository evidence.
• /fcukit (Full Configuration, Understanding & Knowledge Integration
  Tool) discovers repository identity and risks before presenting one
  consolidated approval plan for the smallest project-specific setup changes.

Both skills avoid the normal shared preamble because its analytics/session
startup writes would violate their pre-approval safety contracts. /fcukit
instead performs a mandatory observational session-kind probe and fails closed
in headless, Conductor, or unavailable-question-tool paths.

Safety properties

• /noshit has no Write/Edit tools and forbids commands likely to create cache,
  generated, database, service, or infrastructure state.
• /fcukit resolves identity before Git initialization, preserves staged,
  unstaged, and untracked work, and never stages, commits, deletes, deploys, or
  publishes.
• GSTACK_HEADLESS, CI, and GitHub Actions are detected before other commands;
  mutation remains blocked without an explicit usable approval.
• GBrain stays optional and routes through /setup-gbrain for separate consent.
• Existing /health, /cso, /investigate, /qa, /codex, and /ship
  responsibilities are routed rather than duplicated.

Verification

• 764 focused free tests passed, 0 failed.
• 884 version, generator, coverage, and contract tests passed, 0 failed in the
  broader targeted run.
• Two paid hermetic gate E2Es passed:
  • /noshit completed an audit with a clean Git worktree and unchanged
    sentinel.
  • /fcukit under GSTACK_HEADLESS=1 emitted BLOCKED: approval required
    with a clean Git worktree and unchanged sentinel.
• Both skills render into all 10 supported host catalogs.
• git diff --check passes.

The full free suite's functional tests passed after an isolated rerun of the
only failing browser file (54/54). A concurrent full-suite Chromium process
crashed once under resource pressure; this was not reproducible in isolation.
skill:check also retains a pre-existing baseline inconsistency requiring a
Claude root skill file that upstream generation does not produce.

Dogfood

Read-only before/after fingerprints were identical on three representative
local projects: an established containerized backend, a stale non-Git scaffold,
and a deployment-sensitive frontend. The workflows detected a committed
credential-like configuration value, materially stale agent instructions, an
ambiguous repository identity, and production/credential risks without changing
any target files.

Catalog and release

• Version: 1.69.0.0 (package.json 1.69.0)
• Catalog: 55 authored skills plus root alias, 4,635 bytes / 1,159 token
  equivalents under the ratcheted 1,175-token ceiling.
• Documentation and contributor guidance include both workflows and their full
  names.

Known limitations

• Host-specific behavior that cannot be observed is reported as UNKNOWN, not
  inferred as safe.
• /noshit inspects verification commands but intentionally does not execute
  builds, tests, linters, or package managers because they may write state.
• /fcukit classifies deletion candidates but never deletes them.
• Ambiguous non-Git directories remain blocked until a user selects the
  canonical repository identity.

[trunk-io]

Merging to main in this repository is managed by Trunk.

• To merge this pull request, check the box to the left or comment /trunk merge below.

After your PR is submitted to the merge queue, this comment will be automatically updated with its status. If the PR fails, failure details will also be posted here