CI gap: shellcheck + ruff caught 4 findings

The CI matrix ran lint-staged and the main workflow against TS/JS/JSON/MD/YAML. Good coverage there. But plugin/skills/**/*.{sh,py} — the shell and Python scripts inside plugin archetypes and skill sc