Strengthen workflow handoffs and MCP I/O governance

[kevinten10]

Summary

• add a durable Resume / Handoff template and explicit handoff improvement signals
• prune generated dependency trees while scanning handoff documents and count each referenced CLI once per tool call
• strengthen MCP governance for bounded remote/local/Base64 I/O, exclusive outputs, credential-safe errors, and full dependency-surface scans
• prefer patched parent frameworks/BOMs over inconsistent child overrides
• add source-backed research contract coverage, sharpen CLI inventory routing, and refresh reproducible parity/usage reports

All assets remain in their canonical kt-aicoding/skills category; no CLI or MCP implementation was duplicated into this repository.

Validation

• all 6 skills passed quick_validate.py
• python3 scripts/audit-codex-skills.py --root skills --strict
• python3 scripts/audit-codex-skill-usage.py --strict --output /tmp/kt-aicoding-codex-skill-usage.md
• tracked usage report matches the strict generated report
• python3 -m pytest -q (35 passed)
• ruff check .
• git diff --check
• gitleaks detect --source . --no-banner --redact --exit-code 1

No install policy, MCP configuration, or external service state was changed.