Hardened for open-source release.

Security

• Removed TLS certificate bypass for self-hosted forges — system trust store is now used for all connections
• Removed plaintext token file fallback — authentication now exclusively via gh/glab CLI or environment variables
• Added hook security documentation

Documentation

• Added Swift 6.0, macOS 14+, MIT badges
• Fixed SKILL.md config paths to actual Application Support locations
• Documented health command in README and SKILL.md
• Fixed hook logging claim (unified log, not file)

Code

• Switched swift-cli-core to tagged URL dependency (buildable by anyone)
• Extracted shared repo argument resolution and process execution logic