build: refresh managed tooling and dependencies

[aoirint]

Warning

This pull request was created with assistance from LLMs.

Summary

• Update the APM-managed Agent Skills to reviewed aoirint/skills commit 0e41c088efb2bdf44ca58564bb5168d119ac9135.
• Regenerate the lock and deployed Skills with APM CLI 0.28.0.
• Refresh eligible CI tool pins and applicable project dependencies to reviewed current baselines.

Related Issues

None.

Notes for reviewers

The maintainer-approved cooldown waiver is applied only to the directly selected aoirint/skills commit above. Its full SHA, source changes, capabilities, transitive dependencies, licenses, notices, frozen deployment, and audit result were reviewed; no other cooldown or security control is waived.

Proposed merge attribution

• Included: Co-authored-by: Codex <noreply@openai.com> for material implementation assistance.

AI disclosure

Codex inspected the repository, prepared the dependency and generated-file updates, and ran the reported checks. The resulting diff and check results were reviewed before publication.

Testing

• apm install --frozen
• apm audit --ci
• git diff --check
• Repository-owned Markdown validation
• Applicable workflow source checks, language quality gates, tests, builds, packaging checks, and container smoke tests for the changed surface