* Add a local validate-skills script, check all skills in CI
* Don't continue-on-warn - fail CI if merged skills fail validation
* Anticipate GitHub Copilot comment about GH context injection vectors
* Confirm skill-validator-ent is installed locally, or suggest install instructions
* Fix comments from Copilot review