chore: update workflow skills

[isuttell]

Summary

• Refresh project-scoped workflow skills from zaks-io/skills.
• Generated by npx skills update -p -y.

Review automation

• @coderabbitai ignore
• CodeRabbit disabled for this mechanical generated dependency update.

Test plan

• Not run by coordinator

[cursor]

First-pass review

Risk: medium
Decision: request changes

Ticket triage

• Intended change: Mechanical downstream refresh of project-scoped ziw-* workflow skills from zaks-io/skills via npx skills update -p -y, updating skills-lock.json hashes and synced .agents/skills/** content.
• Scope match: Yes. The diff is limited to workflow skill files, lockfile hashes, and Codex openai.yaml prompt tweaks — no product/runtime code.

Review findings

Blocking:

• The required Validate CI job (ci.yml) did not run on this PR. Only CodeQL completed. The prior analogous refresh (codex/update-workflow-skills-2026-07-04, run 28716534141) ran full CI including Validate, Secret scan, and Postgres smoke. Per docs/agents/workflow/config.md, Validate is the merge gate. Do not merge until Validate is green.

Non-blocking:

• No Linear issue is linked in the PR body. Acceptable for coordinator-generated refreshes, but linking a refresh ticket (or noting the coordinator run id) would improve traceability.
• This is a cross-cutting agent-workflow change (orchestrator refactor, new tick-snapshot.mjs, expanded ziw-code-review independent mode). Content matches current zaks-io/skills main and upstream check-skills passes; a human should spot-check orchestration behavior after CI is green.
• Test plan correctly notes coordinator did not run tests; reliance on CI is appropriate once Validate runs.

Merge checklist

• Ticket linked: No (coordinator refresh; no AP issue cited)
• Scope matches: Yes
• Checks green: No — Validate missing
• Tests/docs appropriate: Yes for a mechanical skill sync
• No blocking findings: No
• No high-risk areas: Partial — cross-cutting agent workflow, but trusted upstream sync
• Merge-safe: No until Validate passes

What to do

1. Re-trigger CI on this branch (empty commit push or workflow_dispatch) and confirm Validate succeeds.
2. Merge once Validate is green; no code changes appear necessary.

  

_{Sent by Cursor Automation: First Pass PR Reviewer}