chore: pin rig skill to local HEAD instead of stale SHA

[Copilot]

Workflows that inject skills/rig/SKILL.md as agent context were pinned to a 6-month-old commit SHA, meaning they ran against a frozen snapshot of the API reference rather than the version under active development in this repo.

Changes

• daily-rig-file-summarizer.md, daily-rig-sampler.md — updated skills: entry from 31d2dbdf... to current HEAD (eb773e967...)
• *.lock.yml — regenerated via gh aw compile --strict

daily-rig-task-generator.md is unaffected — it reads the skill via cat skills/rig/SKILL.md in the agent body, which always resolves from the workspace checkout.

[pelikhan]

@copilot use step to gh skill install --local-skill --force

[Copilot]

@copilot use step to gh skill install --local-skill --force

Done in eb8a2b7. Replaced the skills: frontmatter entries (pinned remote SHA) in both daily-rig-file-summarizer.md and daily-rig-sampler.md with a steps: entry that runs gh skill install . rig --from-local --force, so the skill is always installed from the local skills/rig checkout at runtime.

[github-actions]

🧠 Matt Pocock Skills Reviewer has completed the skills-based review. ✅

[github-actions]

Skills-Based Review 🧠

Applied /codebase-design — clean infrastructure maintenance, no blocking issues.

📋 Review Summary

What was reviewed

• daily-rig-file-summarizer.md and daily-rig-sampler.md: skills: SHA pinning replaced with steps: + gh skill install . rig --from-local --force
• Both .lock.yml files regenerated via gh aw compile --strict

Assessment

• ✅ gh skill install . rig --from-local --force correctly points to the repo root; skill discovery finds skills/rig/SKILL.md via the standard convention
• ✅ Removing the Collect skill install failures infrastructure is correct — the new steps: approach surfaces failures as native workflow step failures
• ✅ Lock files consistently regenerated; no stale manifest entries remain
• ✅ PR description correctly notes daily-rig-task-generator.md is unaffected (reads skill via cat in the agent body)

Minor observation (non-blocking)

daily-rig-claude-compat.md (not changed here) uses gh skill install skills/rig rig --from-local while this PR uses . as the repo root. Both resolve correctly, but aligning to . in a follow-up would keep the pattern consistent.

🧠 Reviewed using Matt Pocock's skills by Matt Pocock Skills Reviewer · sonnet46 42 AIC · ⌖ 5.77 AIC · ⊞ 6.3K
_{Comment /matt to run again}