fix: dedupe repeated skill_discovered events

[byapparov]

Summary

• dedupe session.skill_discovered emission per (sessionID, skill) so repeated tool registration across steps does not inflate telemetry
• keep discovery scoped per session so a new session still emits its own events
• add regression coverage for repeat init in one session and fresh discovery in another

Testing

• bun test test/tool/skill-events.test.ts
• pre-push hook: bun turbo typecheck

Closes #68

[aictrl-dev]

Now I'll dispatch all subagents in parallel: Security (empty manifest), Consistency, and Bug Hunter (1 shard, S=81).## Code Review: PR #69 — fix: dedupe repeated skill_discovered events

Files reviewed: 2 (packages/cli/src/tool/skill.ts, packages/cli/test/tool/skill-events.test.ts)
Concerns checked: Security, Consistency, Bug/Breaking-Changes

Security

No files matched security-sensitive paths. No findings.

Consistency

No findings. The refactored publish helper and Instance.state-based dedup set follow existing module conventions. The new test mirrors the structure of existing tests in the same file.

Bugs & Breaking Changes

No findings. The Set<string> keyed on sessionID:skillName correctly deduplicates within a session while allowing fresh discovery in new sessions. The test coverage validates both the dedupe case and the cross-session case.

---

Result: [] — no issues found.