docs: global skills review — dedup, descriptions, gaps, CI

[marcos-muino-garcia]

What

A global review of all 8 skills, motivated by content having accreted feature-by-feature (each platform PR touched 6–9 files).

Governance & CI

• CONTRIBUTING.md: content-ownership map — each concept has one owning skill with the full explanation; other skills carry a one-line gotcha + pointer. Also documents the JS/Python mirroring rule and the description-writing rule.
• CI workflow (.github/workflows/validate.yml): runs skills-ref validate on every skill and fails if fcode-javascript / fcode-python section headings diverge. Actions pinned to SHAs; zizmor-clean.

Deduplication (into owners)

• Settings-form pre-fill rules: fcode-forms/references/advanced.md owns them; custom-app-linear.md now points instead of re-explaining.
• FACTORIAL_TOKEN OAuth procedure: fcode-cli owns; fcode-agent and integration-acme trimmed to pointers.
• webhookAuth non-inheritance rationale: fcode-cli owns; integration-acme trimmed.
• The silent version_tag fallback was stated twice inside fcode-forms/SKILL.md; the gotcha now points to the full section.
• Stable-alias rationale in fcode-agent trimmed to pointers.

Descriptions

• Rewrote fcode-cli and fcode-forms frontmatter descriptions, which had grown into keyword dumps through per-feature appends.

Gap fixes

• Documented APIs the examples use but the language skills omitted: fcode.storage.createSignedUrl / create_signed_url, fcode.team.slug, and the allowConcurrentExecutions schedule option.
• fcode-agent's example interaction predated fcode.sendMail; the built-in option now appears among the email alternatives.
• fcode-examples: noted the fcode-forms module-vs-skill name collision, and that references omit routine logging (fcode-logs guidance still applies).
• Aligned custom-app-linear's credential field with the isSensitive-only guidance; fixed a broken paragraph in fcode-forms and a typo in the sample schema.

Needs verification by a platform owner

The Python spellings were inferred from the JS↔Python idiom mapping and are not confirmed against the runtime:

• fcode.storage.create_signed_url
• fcode.team.slug (Python)
• allow_concurrent_executions= kwarg

Validation

• npx skills-ref validate passes for all 8 skills
• JS/Python heading-structure check passes
• zizmor: no findings on the new workflow

🤖 Generated with Claude Code