## What
A one-command finalizer for the ~8 derived registries/goldens a
skill/command addition makes stale.
- `scripts/regen-all.sh` — regenerates every derived artifact in
dependency order (skill counts → domain-map → SKU registry.json →
context-map → embedded skills → COMMANDS.md → cli-surface → codex
hashes).
- `scripts/regen-all.sh --check` — runs the matching drift validators
(no writes) as a pre-push gate.
- `make regen-all` / `make regen-check` targets.
## Why
PR #598 (`ag-nk67`) took **9 CI rounds** to merge — zero feature-code
failures; every red was a stale derived artifact discovered one CI round
at a time (each gate stops at first error, jobs are independent). This
composes the existing generators into one local pass so it's caught
before the first push. Codex twins stay manual (cannot be
auto-authored).
## Verification
`shellcheck --severity=error` clean; `make regen-check` → **all 9 gates
green** on current main.
Closes-scenario: ag-jima#regen-all-finalizer
Bounded-context: BC4-Factory
Evidence: scripts/regen-all.sh
Bo