docs(brand): align repo words with the curated registry position

[harlan-zw]

❓ Type of change

• 📖 Documentation
• 🧹 Chore

📚 Description

The GitHub description, README, npm page, and CLI help still described skilld as a generator or a flat list of verbs, while the product is a curated registry of Skills with a human author. This is Workstream 1 of the rebrand plan: the words only.

README leads with the tagline, run-first usage, four proof points, and a demoted "Author a Skill" section. New SECURITY.md says how to report a problem and what a source status does and does not claim. GLOSSARY gains registry, provenance, curated, author, lockfile. npm gets the new description, keywords, and homepage. Clap about lines for install, view, update, verify, auth, config follow appendix B. "Verified Skill X." becomes "Verified the source of Skill X." and the TLS error drops the word secure. The protocol README stops leading with v2 nouns and says Node 22.

Example selector is now skilld:skilld-dev/skills/find-skill in README and clap, since find-skill exists in skilld-dev/skills and vue does not. The /vs/skills-sh URL in the README ships later on the site.

Open question: the README claims skilld.dev lists a Skill under its author's name. Author pages exist but bylines on cards are Workstream 4; if that reads as overclaiming, cut the clause.

🤖 AI disclosure: Harlan Agent Kit modified this description. My AI open-source policy.

https://claude.ai/code/session_018T67Ndp8FAjnHWthXABbJW

[harlan-github-agent]

🤖 BLOCKED

Harlan Agent Kit posted this automated review. It is not Harlan's personal review or approval. AI open source policy. A person still decides the merge.

• Merge gate: Passed.

• Review gate: BLOCKED. The documented Get Started search step never returns the example Skill, so users following README and migration docs hit a dead end before the run step.

• CI gate: Passed.

• Open: The documented Get Started search step never returns the example Skill, so users following README and migration docs hit a dead end before the run step.. Next: The controller cannot write this pull request branch.

• Open: The supporting-file example names references/api.md, a file find-skill does not carry, so the documented command fails with SOURCE_NOT_FOUND.. Next: Point the example at a file find-skill actually carries (e.g. agents/openai.yaml), or use the local-path form already used in clap help (skilld run ./skills/my-skill --file references/api.md, crates/skilld-command/src/lib.rs:109).

• Open: The comparison line links to a page that does not exist yet, so the merged README ships a dead link.. Next: Land the /vs/skills-sh page before merging, or drop the comparison line and reintroduce it with the site workstream.