feat: add portable review and visual pr skills

[sunwrobert]

Summary

Add twelve portable skills for code review, writing, browser automation, commits, and PR delivery. create-pr combines an inline explanation with PNGs rendered from a self-contained HTML diagram; ship-with-proof carries a change through tests, review, and end-to-end evidence without merging.

The PR tracker now resolves repository, author, and review requirements dynamically. The HTML skill uses project or neutral styling without OpenRouter infrastructure assumptions. Upstream licenses and supporting references are included; the README has no Skills section.

Show me

flowchart TD
    A[Read the actual PR diff] --> B[show-me: compact inline diagram]
    A --> C[code-diagram-html: standalone explainer]
    C --> D[Render and inspect PNG]
    D --> E[Host image and HTML]
    B --> F[Update existing PR body]
    E --> F
    F --> G[Verify images render on GitHub]

Loading

ship-with-proof
  implement + test
  thermo review + fixes (up to four rounds; unresolved = incomplete)
  record changed behavior + adjacent flow
  create-pr → inline diagram + HTML + embedded PNG
  finish CI + review resolution
  report evidence; do not merge

Visualization

The diagram is hosted as a GitHub attachment. Generated HTML and PNG files are excluded from the repository; the standalone HTML remains a local artifact.

Source provenance

Record 26 verified external skill sources in skill-sources.json, with source paths and pinned comparison commits. Seven imported skills already in this repository also carry GitHub CLI tracking metadata. The catalog covers other personal skills without vendoring their files. Local skill bodies are preserved and differences from upstream are marked explicitly; comparison commits do not claim to be the original installation revisions.

Humanizer's root skill is not discoverable by the installed CLI, so its provenance is verified through GitHub's API. The existing sandbox-sdk skill is pinned to a historical revision before its upstream rename. Locally authored or unverified skills remain explicitly unattributed. Added guidance prevents blind updates from overwriting customizations.

Validation

• Lint/format and typecheck passed.
• Skill metadata validated; personal copies of the authored skills were synchronized.
• bun run test:unit passes with --passWithNoTests: no unit tests currently exist; actual failing tests still fail.
• Rendered the HTML at 2× scale and inspected desktop and mobile layouts.
• This PR exercises visual PR delivery; the full ship-with-proof implementation/review/video workflow has not been exercised.