feat(skills): sync matt pocock skills + ban ai self-attribution

[verkligheten]

Summary

Syncs the vendored Matt Pocock skills to upstream mattpocock/skills@391a270 (2026-07-10) and adds a global rule banning AI self-attribution.

Every imported skill was reviewed for prompt-injection, exfiltration, credential access, and destructive commands by an adversarial multi-agent pass before import — result: zero confirmed findings.

Skills

• Updated in place: code-review, tdd, grill-me, grill-with-docs, improve-codebase-architecture, handoff, prototype (with their bundled reference files).
• Renamed + updated: debugging-protocol→diagnosing-bugs, write-a-skill→writing-great-skills, setup-project-context→domain-modeling, to-prd→to-spec, to-issues→to-tickets.
• Added: codebase-design, research, triage, wayfinder, grilling, and setup-agent-tracker (per-repo issue-tracker/triage/domain setup, de-branded from upstream's setup-matt-pocock-skills).
• Retired (removed upstream): caveman, zoom-out.
• Kept as ours: chrome-test, brainstorming, refactoring-protocol, and the rest of the non-Pocock skills.

All Matt-Pocock branding stripped from shipped content; /setup-matt-pocock-skills references rewritten to /setup-agent-tracker.

Attribution ban

New global rule no-ai-attribution forbids any model from adding Co-Authored-By, "Generated with", robot emoji, or any self-attribution to commits, PRs, code comments, or anywhere. Distributed to all CLIs like safety/code-quality; cross-referenced from the git skill. (These commits and this PR follow it.)

Build fix

build-claude-plugin.sh now vendors full skill directories (previously dropped reference files like tdd/mocking.md) and prunes retired/renamed skills from .claude-plugin/skills/ on each build instead of leaving them stale.

Verification

• Adversarial injection review: 17 skills, 0 confirmed findings.
• Frontmatter valid across all 28 skills; 21 vendored into the plugin.
• Test suite: 1851 passed. The single test_memory_migrate failure is pre-existing and unrelated (fails identically on main — a Python 3.14 nondeterminism in memory migration).

CHANGELOG entries added under [Unreleased]; VERSION left for scripts/release to bump.