plugin-quality: setup skill + evals

[kyle-sexton]

Parent

Source: PLAN Phase B5, topic plugin-audit-port — plan locked at commit 40a64b5c on
feat/plugin-audit-port.

What to build

plugin-quality setup skill (disable-model-invocation: true, check/apply):

• check: gh present + authed (report the ACTING account — this machine class can hold
  multiple GitHub identity domains); context-guard snapshot seam present → report the dispatch
  mode the audit will run in (zone-informed vs conservative); config layers found + effective sink
  with per-layer provenance (config-cascade resolution algorithm: read every layer, report which
  layer supplied each value).
• apply: write/converge the tracked .claude/plugin-quality.md from interview or supplied
  arguments; idempotent; preserves unrecognized keys; recommends the recursive
  .claude/**/*.local.* gitignore line but NEVER writes the consumer's .gitignore.
• Setup evals (skills/setup/evals/evals.json).

Acceptance criteria

• /skill-quality:check passes on the setup skill
• validate-evals passes
• check reports acting gh account and effective sink with layer provenance
• apply is idempotent (second run = no diff) and never touches .gitignore

Blocked by

• Config-surface slice (native edge — the keys apply writes are defined there).

[kyle-sexton]

[kyle-sexton]

Closed by PR #1243 (squash c287fbca). Evidence: skill-quality gate PASS (0 errors); evals validate; check reports the ACTING gh account and effective sink with per-layer provenance; apply converges only the tracked .claude/plugin-quality.md, idempotent, never touches .gitignore.