chore(agents): sync skills table and architecture inventory

CONTRIBUTING.md was missing fix-security-issue and helm-dev-environment
from the skills table. AGENTS.md was missing openshell-driver-podman,
openshell-prover, and openshell-vfio from the architecture overview.
Add them so the documented inventories match what is on disk.

Signed-off-by: Taylor Mutch <taylormutch@gmail.com>

Author: TaylorMutch

AGENTS.md

@@ -41,7 +41,10 @@ These pipelines connect skills into end-to-end workflows. Individual skill files
 | `crates/openshell-tui/` | Terminal UI | Ratatui-based dashboard for monitoring |
 | `crates/openshell-driver-kubernetes/` | Kubernetes compute driver | In-process `ComputeDriver` backend for K8s sandbox pods |
 | `crates/openshell-driver-docker/` | Docker compute driver | In-process `ComputeDriver` backend for local Docker sandbox containers |
+| `crates/openshell-driver-podman/` | Podman compute driver | In-process `ComputeDriver` backend for rootless Podman sandbox containers (single-host / dev) |
 | `crates/openshell-driver-vm/` | VM compute driver | Standalone libkrun-backed `ComputeDriver` subprocess (embeds its own rootfs + runtime) |
+| `crates/openshell-prover/` | Policy verifier | Formal policy verification (Z3-backed) for sandbox policy correctness |
+| `crates/openshell-vfio/` | VFIO GPU passthrough | VFIO GPU passthrough lifecycle for VM-driver sandboxes |
 | `python/openshell/` | Python SDK | Python bindings and CLI packaging |
 | `proto/` | Protobuf definitions | gRPC service contracts |
 | `deploy/` | Docker, Helm, K8s | Dockerfiles, Helm chart, manifests |

CONTRIBUTING.md

@@ -68,12 +68,14 @@ Skills live in `.agents/skills/`. Your agent's harness can discover and load the
 | Getting Started | `openshell-cli`           | CLI usage, sandbox lifecycle, provider management, BYOC workflows                                   |
 | Getting Started | `debug-openshell-cluster` | Diagnose gateway deployment and health issues                                                       |
 | Getting Started | `debug-inference`         | Diagnose `inference.local`, host-backed local inference, and direct external inference setup issues |
+| Getting Started | `helm-dev-environment`    | Start, configure, and tear down the local k3d + Skaffold + Helm dev environment                     |
 | Contributing    | `create-spike`            | Investigate a problem, produce a structured GitHub issue                                            |
 | Contributing    | `build-from-issue`        | Plan and implement work from a GitHub issue (maintainer workflow)                                   |
 | Contributing    | `create-github-issue`     | Create well-structured GitHub issues                                                                |
 | Contributing    | `create-github-pr`        | Create pull requests with proper conventions                                                        |
 | Reviewing       | `review-github-pr`        | Summarize PR diffs and key design decisions                                                         |
 | Reviewing       | `review-security-issue`   | Assess security issues for severity and remediation                                                 |
+| Reviewing       | `fix-security-issue`      | Implement a fix for a reviewed security issue once `state:agent-ready` is applied                   |
 | Reviewing       | `watch-github-actions`    | Monitor CI pipeline status and logs                                                                 |
 | Reviewing       | `test-release-canary`     | Dispatch and iterate on the Release Canary workflow that smoke-tests published artifacts            |
 | Triage          | `triage-issue`            | Assess, classify, and route community-filed issues                                                  |