check-skill-updates

Check vendored skills for drift — whether our copy diverged from its baseline (local-drift) and whether upstream moved past our pinned commit (update-available). Dry-run: reports and proposes re-syncs, never auto-edits. Use when the maintenance cron fires, or when the user asks to check/refresh vendored skills.